Measurement Study of Post-Quantum Readiness of Internet: 2026
This large-scale measurement study of 32,011 domains reveals that while nearly half have adopted hybrid post-quantum key exchange mechanisms, the complete absence of post-quantum certificates and the continued reliance on legacy protocols in critical sectors leave the Internet vulnerable to quantum-enabled threats like Harvest-Now-Decrypt-Later.
Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
Imagine the internet as a massive, global network of secret tunnels where people send money, private messages, and government documents. To keep these tunnels safe, we use a digital "lock and key" system called TLS (Transport Layer Security). For decades, this system has relied on mathematical locks that are incredibly hard for today's computers to break.
However, scientists are building a new kind of super-computer called a Quantum Computer. Think of this not just as a faster computer, but as a "master key" that can pick almost any of our current digital locks in seconds. If someone gets their hands on one of these machines, they could unlock all our secret tunnels, read our old messages, and even forge new keys to pretend to be anyone they want.
This paper is like a giant security inspection of 32,000 different internet "tunnels" (websites) to see how ready they are for this coming super-computer threat. Here is what the researchers found, explained simply:
1. The "Old Locks" vs. The "New Locks"
The researchers checked two main things: how the tunnel is built (the protocol) and what kind of lock is on the door (the cryptography).
The Protocol (The Tunnel): Most modern tunnels are being upgraded to a newer, sturdier design called TLS 1.3 (about 52% of sites) or the super-fast QUIC (about 32%). However, a significant chunk (about 16%) are still using the older TLS 1.2 design.
- Analogy: It's like a city where half the houses have been renovated with modern, reinforced steel doors, but a large number are still using the old wooden doors from the 1990s. The old doors aren't "broken" today, but the new "master key" (Quantum Computer) can easily snap them.
The Key Exchange (The Handshake): When you visit a website, your computer and the server shake hands to agree on a secret code.
- The Good News: About 49% of the websites are starting to use a "Hybrid Lock." This is like putting a traditional lock and a new, quantum-proof lock on the same door. Even if the quantum computer breaks the old lock, the new one still holds.
- The Bad News: The other 51% are still using only the old, vulnerable locks. They are completely exposed to the future quantum threat.
2. The "Fake ID" Problem (Certificates)
This is the most critical finding of the paper. While many sites are upgrading their door locks (key exchange), none of them have upgraded their ID cards (digital certificates).
- Analogy: Imagine you are entering a secure building. You have a new, unbreakable lock on your briefcase (the key exchange). But the security guard checks your ID card to let you in. If that ID card is forged, the guard lets you in regardless of how strong your briefcase lock is.
- The Reality: The paper found that 0% of the websites use "Post-Quantum" ID cards. They are all still using the old style (RSA or ECDSA). A future quantum computer could forge these IDs, tricking the guard into letting a hacker in, even if the hacker doesn't have the right briefcase lock.
3. Who is Ready? (The Sector Split)
The inspection revealed a big gap between different types of organizations:
- The Tech Leaders: Companies like Google, Cloudflare, and big tech platforms are moving fast. They are the ones installing the "Hybrid Locks" and are considered Low Risk.
- The Critical Sectors: Banks, governments, defense, and telecoms are moving very slowly. They are still heavily relying on the old "wooden doors" and "old ID cards." They are considered High Risk.
- Why? These sectors are like old, massive ships; they are hard to turn. They prioritize stability and compatibility over rapid upgrades, leaving them vulnerable for longer.
4. The "Harvest Now, Decrypt Later" Trap
The paper warns about a sneaky danger called HNDL.
- Analogy: Imagine a thief steals a locked diary today. They can't open it yet because they don't have the master key. But they store the diary in a warehouse. They wait until 10 years from now, when they finally build the Quantum Master Key, and then they open the diary to read your secrets.
- The Risk: Even if you upgrade your locks today, if you are still using the old ID cards or if your data was intercepted yesterday, a future quantum computer can go back and unlock everything that was ever sent over those old connections.
The Bottom Line
The internet is in a "halfway" state. We are halfway through upgrading the locks on our doors (about half the sites have hybrid locks), but we haven't upgraded the ID cards at all.
The paper concludes that we cannot be truly safe until we upgrade both the locks and the ID cards. Until then, our most important secrets (banking, government, defense) remain vulnerable to a future where a quantum computer can pick our locks and forge our IDs. The transition is happening, but it's uneven, and the "old wooden doors" in critical sectors are still wide open to future threats.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.