Knowledge base

Step-by-step guides for enabling hybrid post-quantum TLS in real-world stacks.

Operating systems

• macOS
• Windows
• Linux (Debian/Ubuntu, RHEL/Fedora, Arch)
• iOS / iPadOS
• Android
• ChromeOS

Servers

• nginx (with OpenSSL 3.5+ or oqsprovider)
• Caddy
• Apache HTTP Server

Edge / CDN

• Cloudflare
• AWS (CloudFront, ALB, ACM)
• Azure (Front Door, Application Gateway)
• Google Cloud (HTTPS LB)

Libraries

• OpenSSL 3.x with oqsprovider
• BoringSSL
• Rustls
• Go (crypto/tls)
• wolfSSL
• NSS (Network Security Services)

Browsers

• Chrome / Chromium
• Firefox
• Safari
• Microsoft Edge

Clients & apps

• OpenSSH (mlkem768x25519, sntrup761x25519)
• curl
• WireGuard
• OpenVPN
• Email (SMTP / IMAP / Submission)
• Signal Messenger (PQXDH)
• iMessage (PQ3)
• WhatsApp

Web apps & runtimes

• Node.js
• Python
• .NET
• Java (JDK / JSSE)
• PHP
• SPA / CDN-hosted apps (Vercel, Netlify, Pages)

Articles ship as we move through Phase 1. Have a stack you'd like us to cover? Let us know.