# Self-hosting four-handshake transcript. Node 22.23.3 / OpenSSL 3.5.8. UTC 2026-10-27T01:37:09Z. Vantage AWS us-west-2 (Qtonic Quantum Corp control host). Rule: accepted = TLS handshake completed; refused = the server rejected it with a TLS alert or closed the connection. The client offers one key-exchange group per TLS 1.3 line, so an accepted line used that group. pqc-surface.org tls1.3 group=X25519MLKEM768 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group X25519MLKEM768 (sole group offered); cert verified) pqc-surface.org tls1.3 group=X25519 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group n/a; cert verified) pqc-surface.org tls1.3 group=P-256 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group n/a; cert verified) pqc-surface.org tls1.2 default => ACCEPTED (Ciphersuite: ECDHE-ECDSA-AES128-GCM-SHA256, group n/a; cert verified) www.pqc-surface.org tls1.3 group=X25519MLKEM768 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group X25519MLKEM768 (sole group offered); cert verified) www.pqc-surface.org tls1.3 group=X25519 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group n/a; cert verified) www.pqc-surface.org tls1.3 group=P-256 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group n/a; cert verified) www.pqc-surface.org tls1.2 default => ACCEPTED (Ciphersuite: ECDHE-ECDSA-AES128-GCM-SHA256, group n/a; cert verified) pqc-index.org tls1.3 group=X25519MLKEM768 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group X25519MLKEM768 (sole group offered); cert verified) pqc-index.org tls1.3 group=X25519 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group n/a; cert verified) pqc-index.org tls1.3 group=P-256 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group n/a; cert verified) pqc-index.org tls1.2 default => ACCEPTED (Ciphersuite: ECDHE-ECDSA-AES128-GCM-SHA256, group n/a; cert verified) www.pqc-index.org tls1.3 group=X25519MLKEM768 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group X25519MLKEM768 (sole group offered); cert verified) www.pqc-index.org tls1.3 group=X25519 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group n/a; cert verified) www.pqc-index.org tls1.3 group=P-256 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group n/a; cert verified) www.pqc-index.org tls1.2 default => ACCEPTED (Ciphersuite: ECDHE-ECDSA-AES128-GCM-SHA256, group n/a; cert verified) harvest-proof.pqc-index.org tls1.3 group=X25519MLKEM768 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group X25519MLKEM768 (sole group offered); cert verified) harvest-proof.pqc-index.org tls1.3 group=X25519 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group n/a; cert verified) harvest-proof.pqc-index.org tls1.3 group=P-256 => ACCEPTED (Ciphersuite: TLS_AES_256_GCM_SHA384, group n/a; cert verified) harvest-proof.pqc-index.org tls1.2 default => ACCEPTED (Ciphersuite: ECDHE-ECDSA-AES128-GCM-SHA256, group n/a; cert verified)