Radar - TLS bug detection in the Cloudflare Radar post-quantum checker

The Radar post-quantum TLS support checker now also reports TLS bugs detected during the handshake test. When a scanned host exhibits compatibility issues, the results include details on the specific bugs detected, along with guidance on how to investigate and remediate each issue. The bugs section only appears for hosts where issues are found. The following TLS bugs are detected: Split ClientHello — The connection fails with a fragmented post-quantum ClientHello but succeeds with classical handshakes. Typically caused by middleboxes or firewalls that cannot reassemble split TLS messages. HRR Failure — The server sends a HelloRetryRequest but fails to complete the handshake afterward. Unknown Keyshare — The server cannot handle unknown key exchange algorithms and fails instead of responding with a HelloRetryRequest as required by the TLS 1.3 specification. Bug detection data is available through the existing /post_quantum/tls/support endpoint. Visit the Post-Quantum Encryption page to test a host.