Cultivating a robust and efficient quantum-safe HTTPS
AI Summary
Google Chrome announced a new program to transition HTTPS certificates to be secure against quantum computers by adopting Merkle Tree Certificates (MTCs) instead of traditional X.509 post-quantum certificate chains, avoiding massive bandwidth penalties during TLS handshakes. Developed in collaboration with the IETF PLANTS working group, MTCs use compact cryptographic inclusion proofs derived from a single Tree Head signed by a Certification Authority. Chrome's rollout spans three phases: a feasibility study with Cloudflare backed by traditional X.509 fallbacks (underway), bootstrapping public MTCs with experienced CT log operators (Q1 2027), and finalizing requirements for a new Chrome Quantum-resistant Root Store (CQRS) supporting MTCs (Q3 2027).
Key Takeaways
- Chrome does not plan to add traditional post-quantum X.509 certificates to the main Chrome Root Store due to scalability and bandwidth issues.
- MTCs inherently build transparency into certificate issuance by requiring inclusion in a public tree without extra TLS overhead.
- The rollout includes three phases, featuring a current feasibility study with Cloudflare using traditional X.509 fail-safes.
Why it matters
Post-quantum cryptography algorithms drastically increase certificate size, which can degrade TLS handshake performance and network bandwidth. MTCs solve this scalability challenge by using lightweight inclusion proofs, maintaining modern web performance while protecting against future quantum threats.
Conversation 0
Be the first to share your perspective.