Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -14,18 +14,19 @@ The list below is for reference only. Responsibility for third-party software li
:::

## X25519MLKEM768
- Default for [Firefox 132+](https://www.mozilla.org/firefox/) on Desktop
- Default for [Firefox 132+](https://www.mozilla.org/firefox/)
- For QUIC/HTTP3, use Firefox 135+
- On Android, use Firefox 145+ (Beta)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Firefox 145 release is planned for November 11th, let's drop (Beta) to save an edit later:

Suggested change
- On Android, use Firefox 145+ (Beta)
- On Android, use Firefox 145+

Or maybe we can simplify this whole thing to:

- Default for [Firefox 132+](https://www.mozilla.org/firefox/) (Desktop) and Firefox 145+ (Android)
    - For QUIC/HTTP3, use Firefox 135+ (Desktop)

Or maybe start with Firefox 135+ and clarify that Firefox 132-134 only supports it for TLS and non QUIC/HTTP3.

- Default for [Chrome 131+](https://www.google.com/chrome/)
- Default for [Safari 26+](https://www.apple.com/safari/)
- System-wide support in iOS 26, macOS Tahoe 26, and other [Apple operating systems](https://support.apple.com/122756)
- Default for [Edge 131+](https://microsoft.com/edge/)
- Default for recent [Opera](https://opera.com) and [Brave](https://brave.com)
- Default for [Tor Browser 15.0](https://www.torproject.org/) on Desktop (Alpha)
- Default for [Tor Browser 15.0+](https://www.torproject.org/)
- Cloudflare's [fork of Go](https://github.com/cloudflare/go)
- Default for [Go 1.24+](https://go.dev/doc/go1.24#cryptotlspkgcryptotls)
- Default for [OpenSSL 3.5.0+](https://www.openssl.org/)
- Default for [Node 24.5.0+](https://nodejs.org/)
- Default for [Node 24.5.0+, 22.20.0+](https://nodejs.org/)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewer note: I can confirm that v22.20.0 (node:22.20) indeed supports X25519MLKEM768, and that v22.19.0 (node:22.19) does not. Both are LTS versions, 23.x is EOL and does not support it.

- [BoringSSL](https://boringssl.googlesource.com/boringssl/)
- [GnuTLS](https://www.gnutls.org)
- 3.8.9+ compiled with leancrypto 1.2.0+
Expand Down