2 Commits

Author	SHA1	Message	Date
vitya	cacd582303	fix(nl-vds-3xui): disable ML-DSA-65 PQ on Reality 443 — GUI clients can't connect ... Root cause of "Reality fails on client": v2rayN 7.19.5 + phone apps do NOT emit mldsa65Verify to the xray core, so they can't auth to a PQ-mandated REALITY inbound (only plain VLESS 32030 worked). Replica matrix: noPQ+no-verify=204, PQ+no-verify=000, noPQ+with-verify=000. Removed mldsa65Seed from inbound id=1 -> standard Reality X25519. Verified verify-less client through real :443 -> 204. Fresh X25519 share-link generated for re-import. Wiki concept updated. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-05 12:31:31 +03:00
vitya	4fc7cbf688	wiki(nl-vds-3xui): new NL 3x-UI node + Reality PQ×dest root-cause ... Reality 443 inbound silently fails: ML-DSA-65 (post-quantum) ClientHello key-share X25519MLKEM768 relayed to dest www.intel.com (Akamai) -> HRR -> borrowed-TLS handshake never completes. Plain VLESS 32030 unaffected. Isolated via replica xray pair (matrix: intel+PQ is the only failing cell). Fix (NOT applied, awaiting user): switch dest/SNI -> www.microsoft.com (PQ-capable, verified) on both inbound and client profile. - new entities/nl-vds-3xui.md - new concepts/reality-pq-mldsa65-dest-incompatibility.md - index.md + log.md updated - creds saved to pass nl-vds-3xui/full-env (not in repo) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-05 11:26:16 +03:00