Banks are moving TLS from classical cryptography (X25519 key exchange, RSA/ECDSA certificates) to post-quantum cryptography (ML-KEM key exchange, ML-DSA signatures) and to hybrid modes that mix both.