How a TLS 1.3 handshake establishes a secure session, exactly which step a quantum attacker breaks, and how hybrid key exchange closes the hole.
Two asymmetric messages set up the session key; everything after runs on fast symmetric crypto. Hybrid key exchange (X25519 + ML-KEM) forces the attacker to break both the classical and the quantum layer.