Add TLS key exchange mechanism to panel

[marvinruder]

In addition to the existing “Encryption Settings” panel which displays TLS version and cipher (#1086), I would like to visualize the mechanism used in TLS key exchange. This would be particularly useful to analyze the adoption of post-quantum mechanisms like X25519MLKEM768 by clients. Would it be possible to add this information to either the existing “Encryption Settings” or a new panel?

[allinurl]

Sounds doable. Could you please share a few complete log lines that include this data so I can take a look?

[marvinruder]

Sure. I do not know of any standard log format that includes this information, but I use a custom JSON log format in nginx:

{"addr":"<ip>","time":"2025-12-14T15:02:56+00:00","method":"GET","scheme":"https","host":"mruder.dev","path":"/","proto":"HTTP/2.0","status":"200","size":306,"type":"text/plain; charset=utf-8","latency":0.000,"agent":"curl/8.7.1","tls":"TLSv1.3","cipher":"TLS_CHACHA20_POLY1305_SHA256","curve":"secp384r1"}
{"addr":"<ip>","time":"2025-12-14T15:03:22+00:00","method":"GET","scheme":"https","host":"mruder.dev","path":"/","proto":"HTTP/3.0","status":"200","size":309,"type":"text/plain; charset=utf-8","latency":0.000,"agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Safari/605.1.15","tls":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","curve":"X25519MLKEM768"}

A complete list of supported curves is given here.