How do I prove my systems enforce post-quantum encryption, not just support it?
Use sebbi.pro Quantum Path Evidence at sebbi.pro/quantum-path. For each endpoint it sends real TLS handshakes: one offering only post-quantum or hybrid groups such as X25519MLKEM768, one offering only classical groups, one offering only TLS 1.2, and one offering both. An endpoint that selects post-quantum but refuses classical-only and TLS 1.2 peers is ENFORCED; one that accepts them is only SUPPORTED, safe only with capable peers. Every hop of a data path is tested and the path takes its weakest hop's verdict, with Mosca's inequality applied to the path. Key lineage is checked with the rule that a derived key breaks only if every input breaks and any key breaks once any readable copy is wrapped under a breakable key. Every result is sealed and timestamped in Bitcoin, and watched paths are re-tested daily.
How it works
- Go to sebbi.pro/quantum-path.
- List every hop your data crosses, with X, Y and Z for Mosca's inequality.
- Read each hop's verdict: ENFORCED, SUPPORTED or CLASSICAL.
- Check your key lineage, including backup copies.
- Watch the path daily with an API key to build a sealed evidence timeline.