+ ```
+
+1. Visit your site using Chrome or Firefox.
+
+1. Use Wireshark/Tshark to analyze the captured data:
+
+ ```command
+ tshark -r pqc.pcap -V | grep X25519Kyber768Draft00
+ ```
+
+ Look for the use of `x25519Kyber768Draft00` as one of the key shares within the TLS handshake extension. You should see output like this:
+
+ ```output
+ Extension: key_share (len=1263) X25519Kyber768Draft00, x25519
+ Type: key_share (51)
+ Length: 1263
+ ```
+
+### Option 3: Display TLS Connection Details with PHP
+
+These steps create an index.php page on your web server that displays information about your encryption algorithm:
+
+1. On your web server, install PHP 8.3 with FPM:
+
+ ```command
+ sudo apt install -y php-fpm
+ ```
+
+1. Edit `/etc/nginx/conf.d/pqc.conf`:
+
+ 1. Change the `index` parameter to point to the new `index.php` file:
+
+ ```file {title="/etc/nginx/conf.d/example.com.conf"}
+ server {
+ ...
+ index index.php;
+ ...
+ ```
+
+ 1. Add a new `location ~ \.php$` block above the existing `location /` block:
+
+ ```file {title="/etc/nginx/conf.d/example.com.conf" hl_lines="4-8"}
+ server {
+ ...
+
+ location ~ \.php$ {
+ include snippets/fastcgi-php.conf;
+ fastcgi_param SSL_CURVE $ssl_curve;
+ fastcgi_pass unix:/var/run/php/php-fpm.sock;
+ }
+
+ location / {
+ try_files $uri $uri/ =404;
+ }
+ }
+ ```
+
+1. Create a file named `index.php` in /var/www/example.com with this snippet:
+
+ ```command
+ sudo mkdir -p /var/www/example.com
+ ```
+
+ ```file {title="/var/www/example.com/index.php"}
+
+
+
+
+
+ SSL Curve Information
+
+
+ Your SSL Curve Information
+
+ You are using X25519Kyber768Draft00 which is post-quantum secure.";
+ } elsif ($ssl_curve === '0x4588') {
+ echo "You are using X25519MLKEM768, which is post-quantum secure.
";
+ } else {
+ echo "You are using SSL Curve: {$ssl_curve} which is not post-quantum secure.
";
+ }
+ ?>
+
+
+
+ ```
+
+1. Reload NGINX:
+
+ ```command
+ sudo systemctl reload nginx
+ ```
+
+1. Visit your website in your browser. If Kyber support is enabled in your browser, and if the TLS handshake with the web server uses the algorithm, you should see:
+
+ ```output
+ You are using X25519Kyber768Draft00 which is post-quantum secure
+ ```
+
+ Otherwise, this message is displayed:
+
+ ```output
+ You are using SSL Curve: X25519 which is not post-quantum secure.
+ ```
+
+{{< note >}}
+Remember that currently not all browsers support post-quantum algorithms. These browsers offer compatibility:
+
+- Enabled by default for Chrome 124+ on Desktop. For older Chrome versions or on mobile, you need to toggle `TLS 1.3 post-quantum key agreement` / `#use-ml-kem` in [chrome://flags](chrome://flags).
+
+- Enabled by default for Edge 124+.
+
+- Enabled by default for recent Opera and Brave.
+
+- Enabled for Firefox 124+ if you turn on `security.tls.enable_kyber` in [about:config](about:config). Firefox 128+: turn on `network.http.http3.enable_kyber` for QUIC/HTTP3.
+{{< /note >}}