Point it at any domain; see whether its encryption is quantum-vulnerable.
We inspect the public TLS handshake only — nothing intrusive.