Web browsers and servers and cloud services used in NSS were to support and prefer CNSA 2.0 by 2025 and must use it exclusively by 2033. In CSfC terms this class covers TLS-protected clients and servers and SRTP clients and servers, and the CSfC addendum requires TLS 1.3 for every CSfC TLS component (and for EAP-TLS) as the vehicle for ML-KEM-1024 and ML-DSA-87 under the CNSA 2.0 TLS profile.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.