“We have two additional policies. One is the enhanced policy, which is a policy which follows the NIST-aligned configuration, and that drops the hybrid X25519 curve. The third one is a custom policy, and this is a cool policy because now customers can customize exactly which configuration they wish to support.”
Azure Front Door · The Azure Security Podcast · Episode 134: Post Quantum Crypto TLS 1.3 in Azure Front Door
Play from 11:01
11:01
Audio streams from the publisher’s own feed. Verbatim does not host or copy it.
What was described
offers three configurable TLS policies: standard (default), enhanced (NIST-aligned, drops X25519), and custom (customers pick supported curves)
Said nearby on the same subject
“The new PQC ciphers that we have curved that we have added are SECP256 hybrid as well as X25519 hybrid. These are on the default policy, which we are calling our standard policy.”
“The groups are coming in a pre-configured order. At the moment, we do not support priority configured by customer. And the way that we configure the system is we're trying to use them all secure first.”