Next goal is to obtain the PQC key exchange, but this is sadly not entirely possible with the Linux distribution I’m using due to various important supporting libraries.

And likewise for the mail side of things, I can’t achieve any higher because BIMI is very much a business function that requires access to a registered trademark with an image/logo. It also costs over £1,000+ per year for the certificate that’s needed to prove the organisation’s identity. Google Workspace does not support TLS (DANE), so I can’t use that, either.
But my edition of Google Workspace does support S/MIME for encrypted email and sender/ID verification – so if you get an email from me using Gmail, you’ll likely see that the sender has been verified. If you use Outlook, not so much, because Microsoft makes it a pain in the arse to deploy and use S/MIME.
