0.34.9

src/admin/web/index.html

@@ -3071,6 +3071,19 @@
                                 <label><span data-i18n="tlsCiphers">Cipher suites (one per line; empty = rustls
                                         defaults)</span><textarea id="tls-policy-ciphers" rows="8"
                                         spellcheck="false"></textarea></label>
+                                <div class="tls-pqc-control">
+                                    <label class="check"><input id="tls-policy-pqc" type="checkbox" />
+                                        <span data-i18n="tlsPqcLabel">Experimental post-quantum key exchange
+                                            (PQC)</span>
+                                    </label>
+                                    <p class="fine" data-i18n="tlsPqcHelp">TLS 1.3 only: prioritize hybrid
+                                        X25519MLKEM768 with classic key exchanges as fallback. This is a key exchange
+                                        group, not a cipher suite. Disabled by default.</p>
+                                    <a href="/docs#doc=docs%2FTLS_POST_QUANTUM.md" target="_blank"
+                                        rel="noopener noreferrer" data-i18n="tlsPqcDocs">Learn about PQC, compatibility
+                                        and testing (documentation)</a>
+                                </div>
+                                <p class="fine" id="tls-policy-key-exchange"></p>
                                 <p class="fine tls-policy-effective" id="tls-policy-effective"></p>
                                 <p class="fine" id="tls-policy-available"></p>
                                 <div class="form-actions"><button class="primary" data-i18n="apply"