Gulf CybersecurityBaseline
العربيةCheck your domain
Kuwait City at night from space, its streets in amber light along the dark water of the bayRiyadh at night from space, a wide grid of white and amber light in the desertDubai at night from space, with Palm Jumeirah lit in the sea below the coast roadDoha at night from space, the city's lights spreading from the bay along its roadsBahrain at night from space, the island's towns joined by lit roads in a dark seaMuscat and Al Seeb at night from space, the coast road and the airport in amber light beside a dark sea

Post quantum ready

Post quantum key exchange

Is traffic sent today protected against decryption by a future quantum computer?

Why it matters

Anyone recording encrypted traffic today could decrypt it once a large quantum computer exists, which is why browsers now offer a hybrid key exchange that adds ML-KEM to X25519. A server that accepts it protects what it sends today against that later decryption.

When a domain passes

Passes when the server completes a TLS 1.3 handshake that offers only the hybrid group X25519MLKEM768.

How to fix it

  1. Upgrade to a TLS library that supports ML-KEM, such as OpenSSL 3.5 or later, or turn it on at your CDN.
  2. Keep X25519MLKEM768 first in the server's list of groups.

Reference specifications

All thirteen standards