Mind the Gap: Policy vs Reality in Post-Quantum TLS Deployment
This paper presents the first longitudinal measurement study of post-quantum TLS adoption, revealing a significant gap between divergent policy roadmaps and the reality of limited, provider-driven deployment centered on a single hybrid construction, while demonstrating that such implementations introduce no meaningful latency overhead.
Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
Imagine the internet as a giant, bustling city where every message sent between a user and a website is a letter carried by a trusted courier. For decades, these letters have been locked in unbreakable steel safes using a specific type of lock called "public-key cryptography." But a new kind of super-tool, called a quantum computer, is being built. If this tool ever becomes powerful enough, it won't just pick the lock; it will melt the safe entirely, reading every secret letter ever sent. To stop this future disaster, scientists are inventing new, super-strong locks that even quantum computers can't melt. This is called Post-Quantum Cryptography (PQC). Governments and experts have been drawing up strict blueprints and timelines, telling everyone exactly when and how to swap out the old locks for the new ones. But here's the big question: Are people actually doing it? And if they are, are they following the blueprints, or are they just winging it?
This paper, titled "Mind the Gap: Policy vs Reality in Post-Quantum TLS Deployment," is like a massive, high-tech detective story. The authors didn't just ask people if they were changing their locks; they went out and checked over 2 billion digital handshakes (the moment a website and a user agree on a lock) across one million websites. They wanted to see if the real world matched the government's strict plans.
Here is what they found, and it's a bit of a plot twist.
The Great Convergence: Everyone Picked the Same Key
The governments had drawn up complex maps with many different types of new locks to choose from. Some countries said, "Use this specific size!" while others said, "Try this other one!" They expected a messy mix of different solutions. But the reality was surprisingly boring: almost everyone who switched to the new locks picked the exact same one. It's as if a city council told everyone to build a house with a unique design, but when the inspectors arrived, 99% of the houses were built with the exact same blueprints. Specifically, nearly half of the websites that had upgraded were using a single "hybrid" lock (a mix of an old lock and a new one called X25519MLKEM768). The paper suggests that instead of a diverse ecosystem of many options, the internet is rapidly standardizing on just one.
The Invisible Architects: It's Not You, It's Them
You might think that website owners, like banks or news sites, are the ones frantically changing their locks because they read the government's warning. The paper argues that this is mostly wrong. The real heroes (or villains, depending on how you look at it) are the giant infrastructure companies—the "landlords" of the internet, like Cloudflare and Fastly. These companies host thousands of websites at once. When they flipped a switch to install the new locks, they upgraded nearly 70% of all the websites that were using them. The paper shows that most individual website owners haven't actually done anything yet; they are just riding along because their hosting provider did the work for them. If you own a small website, you probably haven't changed your lock yet, even if your government told you to.
The "Government" Gap
The governments had set strict deadlines, especially for sensitive areas like government services, healthcare, and finance. They expected these sectors to be the first to upgrade. The paper found the opposite. While popular consumer sites (like e-commerce and social networks) were upgrading quickly because their hosting providers did it, government websites and healthcare services were lagging far behind. In fact, in some countries, less than 7% of government websites had made the switch. The paper suggests that the government's strict timelines and sector priorities aren't actually matching what's happening on the ground. The "urgent" sectors are the slowest to change.
Good News: It Doesn't Slow You Down
For a long time, people worried that these new, super-strong locks would be so heavy and bulky that they would slow down the internet. It was like worrying that a new, stronger door would take so long to open that you'd miss your bus. The paper measured this carefully and found that, at the scale of the whole internet, the new locks don't actually make things slower. The time it takes to open the door is basically the same. The only difference is that the "envelope" holding the key is slightly bigger, but the internet handles that extra size without breaking a sweat.
The "Security" Catch
Finally, the paper looked at whether upgrading the lock meant the whole house was safer. They found that just because a website has the new quantum-proof lock, it doesn't mean they threw out all their old, weak security habits. Many websites that upgraded their locks were still using old, outdated software features that could be exploited in other ways. It's like putting a titanium vault door on a house that still has a screen door made of paper. The paper suggests that upgrading the lock is just one step; it doesn't automatically fix the rest of the security system.
The Bottom Line
The paper concludes that while the internet is making progress, there is a huge gap between what the policies say should happen and what is actually happening. The transition is being driven by a few giant companies rather than individual organizations, and it's happening much faster in some areas than others. The good news is that the new technology works without slowing things down. The bad news is that if we rely only on the big companies to do the work, the "long tail" of smaller, independent, and government websites might get left behind, leaving them vulnerable when the quantum computers finally arrive. The paper suggests that to truly secure the future, we need more than just a plan; we need to help the smaller players actually get the job done.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.