UC hybrid PAKE compiler glues a classical PAKE to a PQ KEM, so harvested passwords stay annoyingly useless later.

Red Sift’s overview of PQ key exchange in TLS, from Google experiments to hybrid X25519/ML-KEM. Standards, performance, drama.