pqcClientToEdge

• Property Manager name: Post Quantum Cryptography (PQC) Client to Edge
• Behavior version: The v2026-07-21 rule format supports the pqcClientToEdge behavior v1.0.
• Rule format status: GA, stable
• Access: Read/Write
• Allowed in includes: Yes

Use this behavior to manage Post Quantum Cryptography key exchanges from Client to Edge.

PQC is enabled by default for Enhanced TLS hostnames. To disable PQC for Enhanced TLS, set the behavior to enabled=false. It's recommended to leave PQC enabled to secure client-to-edge communication, protect your data, and address privacy and security goals.

PQC is in limited availability and disabled by default for Standard TLS. To enable PQC for Standard TLS, set the behavior to enabled=true.

To use pqc​Client​To​Edge, your certificate needs to have transport layer security (TLS) 1.​3 enabled in its deployment settings, and the X25519MLKEM768 key group specified during the TLS handshake.

{"displayType":"boolean","tag":"input","type":"checkbox"}