Dan Goodin on Nostr: Filippo is spot on. The question we should be asking now is: "What does Google know ...

Filippo is spot on. The question we should be asking now is: "What does Google know that the rest of us don't?"

quoting
nevent1q…9m0l

Last year, my position was that we still had time to design PQ authentication mechanisms.

Now, based on the pace of progress and on statements like Google's, I believe:

1. we need to finish rolling out PQ key exchange yesterday
2. we need to start rolling out PQ auth now
3. it's too late to ship any new non-PQ design or system

https://blog.google/innovation-and-ai/technology/safety-security/cryptography-migration-timeline/