{"data_policy":{"indexing":"A noindex directive is not access control.","stored_results":"Scan results are stored and can be publicly accessible. Do not submit confidential targets without accepting that policy."},"description":"Measures one public HTTPS connection from the Quantum Aether server to a public IPv4 address, or IPv6 fallback, on port 443. Observes the negotiated TLS protocol and key-exchange group and performs a separate standard certificate handshake.","grades":{"A":"TLS 1.3 and observed hybrid key exchange, subject to certificate and protocol findings.","B":"TLS 1.3 without an observed hybrid exchange; read observation_status before concluding classical-only support.","C":"TLS 1.2 without a more severe finding.","F":"A severe certificate, legacy-protocol or weak-key finding."},"key_exchange":{"evidence":"A completed observed ServerHello selection; a retry-only HelloRetryRequest is undetermined.","hybrid_group":"X25519MLKEM768"},"limitations":"One observed TLS connection is not a comprehensive security assessment; a CDN edge may differ from the origin.","name":"Quantum Aether TLS observation methodology","not_provided":["application vulnerability assessment","permission to execute code or transmit secrets","numeric trust score","HSTS measurement","signed scan receipts"],"observation_states":{"observed_classical":"A classical key-exchange selection was observed.","observed_pq":"Hybrid post-quantum key exchange was observed.","undetermined":"The probe could not establish a completed selection; do not treat this as proof of classical-only support."},"references":{"guide":"https://ather-quantum.com/guides/enable-x25519mlkem768-nginx","privacy":"https://ather-quantum.com/datenschutz?lang=en","scan_policy":"https://ather-quantum.com/scanning","study":"https://ather-quantum.com/study/top-1000-post-quantum-tls"},"updated":"2026-11-07","version":"1.3.0"}