Am I still on the old Kyber draft?

Enter your domain. We list each host's post-quantum groups and flag any that still offer the Kyber draft, which browsers have stopped using.

What this checks

Whether each host accepts X25519Kyber768Draft00 (the draft group, codepoint 0x6399).
Whether it also offers the standard X25519MLKEM768.

What it can't see

Groups used behind your CDN or load balancer.
Old clients of your own that still send the draft group.

Questions

Why does the Kyber draft matter?

Browsers moved from the draft to the standard group (X25519MLKEM768, from NIST FIPS 203). A server that only offers the draft gets classical key exchange from current browsers.

How do I fix it?

Upgrade the TLS library (for example OpenSSL 3.5 or Go 1.24) and offer X25519MLKEM768 first. Our guides show how for common servers.