NCSC updates TLS guidance with post-quantum cryptography recommendations
In short: The UK's NCSC has published updated TLS guidance adding recommended configurations for post-quantum cryptography (PQC), following the IETF's RFC 10024 on hybrid post-quantum/traditional key agreement for TLS 1.3. The guidance covers both hybrid PQC/traditional and pure PQC cipher choices, and is suitable for general use and government OFFICIAL information. Only TLS 1.3 supports PQC, so organisations still on TLS 1.2 or earlier are urged to upgrade. NCSC's existing migration timeline sets 2031 as the deadline for high-priority PQC migrations, and recommends starting now given that standardised configurations and library support already exist.
This summary was generated automatically by AI from NCSC UK's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.
What changed?
- 1New NCSC guidance recommends hybrid PQC/traditional and pure PQC cipher configurations for TLS
- 2Based on IETF RFC 10024 for hybrid post-quantum key agreement in TLS 1.3
- 3Pure PQC RFC still pending final publication, but stable implementations already exist in major libraries
- 4Only TLS 1.3 supports PQC; organisations on TLS 1.2 or older must upgrade
- 5High-priority PQC migration recommended to be completed by 2031
- 6Future updates planned for IPsec guidance and post-quantum TLS authentication
Why it matters
Any organisation relying on TLS to protect data in transit — including APIs, web services and backend connections used by voice and automation platforms — needs to plan for the shift to quantum-resistant encryption well ahead of the 2031 deadline, since protocol and library support is now mature enough to begin migration.
What it means for AI agents and contact centers
If you operate APIs, SIP/VoIP infrastructure, or backend services secured with TLS, check whether your servers and client libraries already support TLS 1.3 and PQC-hybrid cipher suites, and plan an upgrade path away from TLS 1.2, since confidentiality of call and customer data in transit is likely a high-priority category under this guidance.
🧪 Worth Testing
Testing PQC-hybrid TLS 1.3 configurations now lets you verify compatibility with existing servers, proxies and client libraries before mandatory migration deadlines, reducing risk of late, rushed upgrades.
Sources
- NCSC UKOfficialPrimary sourceOriginal article →„Post-quantum updates to our TLS guidance“15 Oct 2026, 15:00Licence: UK government publication (Open Government Licence) · our summary (content changed)
- Published by source
- 15 Oct 2026, 15:00
- Found by our system
- 15 Oct 2026, 12:11
- Summary generated
- 15 Oct 2026, 12:12
This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy