← Knowledge base

Network Security Services (NSS)

NSS provides security libraries used by applications including Firefox. Application policy and the shipped NSS build determine the connection behavior.

Evidence to collect

1. Record the application and bundled NSS version.
2. Review application policy and release documentation for supported named groups.
3. Observe the application connection rather than inferring readiness from the library name or a general certificate utility.

Record the scope and result

Record the tested component, client, peer, protocol, selected algorithm, and date. Keep observed negotiation, documented capability, and unknown distinct. A failed check can reflect local tooling, certificate validation, network policy, or configuration; it does not prove that all PQC is unsupported.

Official references

• Mozilla NSS documentation

Guidance reviewed 24 September 2026. Verify documentation for your deployed release; vendor capabilities and defaults change.