TLDR Tech / InfoSec
On Post-Quantum Security Adoption
Citing 2029 quantum-readiness targets from Google and Cloudflare and a 2035 target from the UK's NCSC, Brandon Rozek walks through hardening three everyday protocols against harvest-now-decrypt-later attacks using hybrid classical/post-quantum key exchange. OpenSSH has defaulted to mlkem768x25519-sha256 since April 2022 and warns post-October-2025 clients when connecting to non-PQ servers, while TLS uses X25519MLKEM768 (supported in Firefox since 132 and Chrome since 131), now covering an estimated 70.1% of Internet traffic per Cloudflare Radar. WireGuard, not post-quantum secure by default, can mix a symmetric PresharedKey for basic protection or layer Rosenpass on top to rotate the preshared key every two minutes and preserve post-quantum forward secrecy.
Read the full story