diff --git a/rpxy-acme/Cargo.toml b/rpxy-acme/Cargo.toml
index 52db006..c0d473a 100644
--- a/rpxy-acme/Cargo.toml
+++ b/rpxy-acme/Cargo.toml
@@ -24,7 +24,7 @@ aws-lc-rs = { version = "1.11.1", default-features = false, features = [
   "aws-lc-sys",
 ] }
 blocking = "1.6.1"
-rustls = { version = "0.23.19", default-features = false, features = [
+rustls = { version = "0.23.20", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
@@ -32,7 +32,7 @@ rustls-platform-verifier = { version = "0.4.0" }
 rustls-acme = { path = "../submodules/rustls-acme/", default-features = false, features = [
   "aws-lc-rs",
 ] }
-rustls-post-quantum = { version = "0.1.0", optional = true }
+rustls-post-quantum = { version = "0.2.1", optional = true }
 tokio = { version = "1.42.0", default-features = false }
 tokio-util = { version = "0.7.13", default-features = false }
 tokio-stream = { version = "0.1.17", default-features = false }
diff --git a/rpxy-bin/Cargo.toml b/rpxy-bin/Cargo.toml
index bf0a148..2c14df7 100644
--- a/rpxy-bin/Cargo.toml
+++ b/rpxy-bin/Cargo.toml
@@ -14,9 +14,7 @@ publish.workspace = true
 
 [features]
 # default = ["http3-quinn", "cache", "rustls-backend", "acme", "post-quantum"] # make this default in future
-# default = ["http3-s2n", "cache", "rustls-backend", "acme", "post-quantum"]
-default = ["http3-quinn", "cache", "rustls-backend", "acme"]
-# default = ["http3-s2n", "cache", "rustls-backend", "acme"]
+default = ["http3-s2n", "cache", "rustls-backend", "acme", "post-quantum"]
 http3-quinn = ["rpxy-lib/http3-quinn"]
 http3-s2n = ["rpxy-lib/http3-s2n"]
 native-tls-backend = ["rpxy-lib/native-tls-backend"]
@@ -34,7 +32,7 @@ rpxy-lib = { path = "../rpxy-lib/", default-features = false, features = [
 mimalloc = { version = "*", default-features = false }
 anyhow = "1.0.94"
 rustc-hash = "2.1.0"
-serde = { version = "1.0.215", default-features = false, features = ["derive"] }
+serde = { version = "1.0.216", default-features = false, features = ["derive"] }
 tokio = { version = "1.42.0", default-features = false, features = [
   "net",
   "rt-multi-thread",
diff --git a/rpxy-certs/Cargo.toml b/rpxy-certs/Cargo.toml
index 1bec247..1ca8e41 100644
--- a/rpxy-certs/Cargo.toml
+++ b/rpxy-certs/Cargo.toml
@@ -22,7 +22,7 @@ derive_builder = { version = "0.20.2" }
 thiserror = { version = "2.0.6" }
 hot_reload = { version = "0.1.8" }
 async-trait = { version = "0.1.83" }
-rustls = { version = "0.23.19", default-features = false, features = [
+rustls = { version = "0.23.20", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
@@ -31,7 +31,7 @@ rustls-webpki = { version = "0.102.8", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
-rustls-post-quantum = { version = "0.1.0", optional = true }
+rustls-post-quantum = { version = "0.2.1", optional = true }
 x509-parser = { version = "0.16.0" }
 
 [dev-dependencies]
diff --git a/rpxy-lib/Cargo.toml b/rpxy-lib/Cargo.toml
index f8c71c4..e5a1806 100644
--- a/rpxy-lib/Cargo.toml
+++ b/rpxy-lib/Cargo.toml
@@ -80,8 +80,8 @@ hyper-rustls = { version = "0.27.3", default-features = false, features = [
 # tls and cert management for server
 rpxy-certs = { path = "../rpxy-certs/", default-features = false }
 hot_reload = "0.1.8"
-rustls = { version = "0.23.19", default-features = false }
-rustls-post-quantum = { version = "0.1.0", optional = true }
+rustls = { version = "0.23.20", default-features = false }
+rustls-post-quantum = { version = "0.2.1", optional = true }
 tokio-rustls = { version = "0.26.1", features = ["early-data"] }
 
 # acme
diff --git a/submodules/s2n-quic b/submodules/s2n-quic
index 0e475b8..b49cb51 160000
--- a/submodules/s2n-quic
+++ b/submodules/s2n-quic
@@ -1 +1 @@
-Subproject commit 0e475b839f65daa6eafa6badb748f4087c133fdb
+Subproject commit b49cb517d0256864a9382f04fedd0e9f71531d85