The #OpenPGP ecosystem is moving forward with new certificate formats from RFC 9580, as well as upcoming #PQC support via datatracker.ietf.org/doc/draft…

We are working towards support for these modern certificate types on keys.openpgp.org

For this, we need to overhaul and extend our user-facing workflows, as well as the API that KOO exposes. The KOO board has decided to move forward based on the HKPv2 protocol:

datatracker.ietf.org/doc/draft…

🧵 1/2

Post-Quantum Cryptography in OpenPGP

This document defines a post-quantum public-key algorithm extension for the OpenPGP protocol. Given the generally assumed threat of a cryptographically relevant quantum computer, this extension provides a basis for long-term secure OpenPGP signatures…

^{IETF Datatracker}

With a few months having gone by since I last checked, I figured I'd do an update on who's currently using post-quantum cryptography on the web. In brief, about 39% of the top 100K domains now offer X25519MLKEM768 (up from about 28% in March). This is primarily the addition of Amazon Cloudfront (the only service to also offer SecP256r1MLKEM768) and Fastly, since Akamai is still opt-in. But we also note Facebook having started to support #PQC.

netmeister.org/blog/pqc-use-20…