iOS and iPadOS
Browser transport, native application connections, and iMessage encryption are separate surfaces on Apple mobile devices.
Evidence to collect
- Record the OS version and app versions without collecting device identifiers.
- Use the browser check on the device and network you want to assess.
- Consult app-specific protocol documentation for messaging or VPNs. An iMessage PQ3 claim is not proof for every application.
Record the scope and result
Record the tested component, client, peer, protocol, selected algorithm, and date. Keep observed negotiation, documented capability, and unknown distinct. A failed check can reflect local tooling, certificate validation, network policy, or configuration; it does not prove that all PQC is unsupported.
Official references
Guidance reviewed 24 September 2026. Verify documentation for your deployed release; vendor capabilities and defaults change.