For site operators
If you found NAVISTRI-PQ-Survey in your logs: this is a research survey of post-quantum
readiness of public-sector websites. It does what a browser does on a first visit, a few times a year.
What it does to your site
- DNS lookups for the hostname.
- Up to three TLS handshakes to port 443, closed right after the handshake.
- One
HEAD /request with the User-AgentNAVISTRI-PQ-Survey/1.0 (+https://pq.navistri.com/scanner/). - No other ports, paths, forms, logins or vulnerability checks. At most a few connections per site per edition.
From where
Short-lived servers at Hetzner (Germany, Finland, United States) and one connection in Ukraine. The servers exist only for the hours of a scan, so their addresses change every edition.
Opt out or correct a result
Write to max@sushch.uk with the hostname. We stop scanning it and mark it as excluded in the next edition. If you enabled post-quantum key exchange after our scan, tell us and we will recheck it.