RFC 8308 adds support for extension negotiation. Of the four extensions defined, it seems like one, server-sig-algs (in section 3.1) might be interesting to analyze from a security standpoint.