RFC 10024 standardises hybrid ML-KEM key agreement for TLS 1.3

What happened

RFC 10024, "Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3", was published in August 2026 on the Standards Track. It defines three hybrid groups that pair ML-KEM with an elliptic-curve exchange: X25519MLKEM768, SecP256r1MLKEM768 and SecP384r1MLKEM1024. X25519MLKEM768 is the hybrid that already carries most human HTTPS traffic on Cloudflare's network. The authors are K. Kwiatkowski of PQShield, P. Kampanakis of AWS, B. E. Westerbaan of Cloudflare and D. Stebila of the University of Waterloo.