# IAB PQ authentication workshop 2026 - position paper
# The 40 hosts measured on 2026-09-01, by group.
# One TLS handshake per host from a single vantage point.
# Note: 40 hosts, 37 distinct organisations - three organisations contribute two
# hosts each, and one of those appears in both group 1 and group 3.

## Internet infrastructure & platforms (12 hosts)
aws.amazon.com
azure.microsoft.com
cloud.google.com
cloudflare.com
fly.io
www.akamai.com
www.digitalocean.com
www.fastly.com
www.ibm.com
www.netlify.com
www.oracle.com
www.ovhcloud.com

## Banks (US / UK / EU) (16 hosts)
www.americanexpress.com
www.bankofamerica.com
www.barclays.co.uk
www.bnpparibas.com
www.capitalone.com
www.chase.com
www.citi.com
www.db.com
www.hsbc.com
www.ing.com
www.lloydsbank.com
www.natwest.com
www.santander.co.uk
www.standardchartered.com
www.ubs.com
www.wellsfargo.com

## Control: organisations that deliberately lead on cryptography (12 hosts)
login.tailscale.com
mail.proton.me
mullvad.net
proton.me
sequoia-pgp.org
signal.org
tailscale.com
www.bouncycastle.org
www.cloudflare.com
www.eff.org
www.openssl.org
www.torproject.org