▲ 3 r/PKI
Probed 31 financial-sector sites for hybrid PQ key exchange: 23 negotiate X25519MLKEM768, 8 don't (2 of those only speak TLS 1.2)
I ran openssl s_client against 32 bank, insurer and payment hostnames on 7-9 Oct. 31 answered: 23 got X25519MLKEM768, 8 fell back to plain X25519, 2 of those never got past TLS 1.2. One bare domain refused, its www host answered.
Convenience sample, one vantage point, key exchange only. For a PCI DSS 12.3.3 crypto inventory: do you record what the public edge negotiates, or only what the origin supports?
u/PrestigiousOnion1087 — 6 days ago