{
 "metric": "tls-pq-readiness",
 "segment": "no-medium",
 "anchor": "company",
 "label": "Norway medium companies",
 "population": "Norway medium companies",
 "states": [
  "hybrid_pq",
  "classical"
 ],
 "quiet_failure_states": [
  "classical"
 ],
 "measurement": "Tier 2. One TLS handshake offering `X25519MLKEM768` ahead of the classical curves, then read which group the server actually chose. TLS 1.2 endpoints are **excluded**, not counted as classical — they have no post-quantum key exchange to decline, and \"not on TLS 1.3\" is already `tls-legacy` against a different denominator. Denominator: `has_web`.",
 "why_it_matters": "The failure with no symptom at all. The padlock is green, the grade is an A, the protocol is current, and the key exchange is the one part that does not survive contact with a quantum computer — retrospectively, because traffic captured today can be decrypted years later once the capability exists. Nothing about the site will ever look wrong, and by the time it matters the recording has already been made. The 47-day certificate clock has a deadline; this one has a countdown nobody can see.",
 "limits": "Measures the key exchange only — a hybrid group protects the session key, not the certificate's signature, so `hybrid_pq` is not \"quantum-safe\" end to end and must not be reported as such. Server support is read as offered to *our* client: a server may prefer a PQ group with a browser that offers a different one. The rate reflects hosting and CDN defaults far more than any decision made by the domain's owner, which is much of the story. Capped at 2,000 domains per run because it needs its own handshake rather than sharing the one the certificate metrics already make.",
 "data_tier": "tls",
 "population_predicate": "has_web",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-10-01",
  "n": 210,
  "qf_pct": 50,
  "ci": [
   43.3,
   56.7
  ],
  "dist": {
   "hybrid_pq": 50,
   "classical": 50
  },
  "snapshot": "brreg-norway-per600-seed20260730"
 },
 "series": [
  {
   "day": "2026-10-01",
   "n": 210,
   "qf_pct": 50,
   "ci": [
    43.3,
    56.7
   ],
   "dist": {
    "hybrid_pq": 50,
    "classical": 50
   },
   "snapshot": "brreg-norway-per600-seed20260730"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/tls-pq-readiness/no-medium"
}