0.34.9

langs/en_US.json

@@ -991,6 +991,13 @@
     "tls13": "TLS 1.3",
     "tlsPolicy": "TLS policy",
     "tlsPolicyHelp": "This is the global TLS policy inherited by every TLS host in the application. Per-vhost policy may only narrow it. HTTP/3 requires TLS 1.3.",
+    "tlsPqcLabel": "Experimental post-quantum key exchange (PQC)",
+    "tlsPqcHelp": "TLS 1.3 only: enable hybrid X25519MLKEM768; classic key exchange remains available for older clients. Key exchange groups are not cipher suites. Disabled by default.",
+    "tlsPqcDocs": "What is PQC? Compatibility, risks and testing (documentation)",
+    "tlsPqcKeyExchangeGroups": "Available key exchange groups",
+    "tlsPqcTls13Required": "PQC requires TLS 1.3 to be enabled.",
+    "tlsPqcGlobalRequired": "Enable PQC in Settings > TLS policy before enabling it for a Vhost.",
+    "tlsPqcVhostHelp": "The global PQC switch must be on. A Vhost override can disable PQC; HTTP/3 requires the Vhost TLS policy to exactly match the global policy.",
     "tlsCiphers": "Cipher suites (one per line; empty = rustls defaults)",
     "tlsAvailableCiphers": "Available cipher suites",
     "tlsPolicyVersionRequired": "Enable at least one TLS version.",