-
Notifications
You must be signed in to change notification settings - Fork 9.8k
[SSL] Update pqc-support.mdx #26233
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[SSL] Update pqc-support.mdx #26233
Conversation
* Mention [Firefox 145 for Android][1] * Tor Browser 15 is stable and [enables PQC on Android][2] * Node 22.20.0 [backports OpenSSL 3.5][3] [1]: https://hg-edge.mozilla.org/mozilla-central/rev/ef49596c0190 [2]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/9ca6db00b134f710bc195bafda2092a88625f956 [3]: https://nodejs.org/en/blog/release/v22.20.0#openssl-updated-to-352
| - Default for [Firefox 132+](https://www.mozilla.org/firefox/) on Desktop | ||
| - Default for [Firefox 132+](https://www.mozilla.org/firefox/) | ||
| - For QUIC/HTTP3, use Firefox 135+ | ||
| - On Android, use Firefox 145+ (Beta) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Firefox 145 release is planned for November 11th, let's drop (Beta) to save an edit later:
| - On Android, use Firefox 145+ (Beta) | |
| - On Android, use Firefox 145+ |
Or maybe we can simplify this whole thing to:
- Default for [Firefox 132+](https://www.mozilla.org/firefox/) (Desktop) and Firefox 145+ (Android)
- For QUIC/HTTP3, use Firefox 135+ (Desktop)
Or maybe start with Firefox 135+ and clarify that Firefox 132-134 only supports it for TLS and non QUIC/HTTP3.
| - Default for [Go 1.24+](https://go.dev/doc/go1.24#cryptotlspkgcryptotls) | ||
| - Default for [OpenSSL 3.5.0+](https://www.openssl.org/) | ||
| - Default for [Node 24.5.0+](https://nodejs.org/) | ||
| - Default for [Node 24.5.0+, 22.20.0+](https://nodejs.org/) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewer note: I can confirm that v22.20.0 (node:22.20) indeed supports X25519MLKEM768, and that v22.19.0 (node:22.19) does not. Both are LTS versions, 23.x is EOL and does not support it.
Mention Firefox 145 for Android
Tor Browser 15 is stable and enables PQC on Android
Node 22.20.0 backports OpenSSL 3.5