The scary part is harvested traffic, which turns into plaintext once quantum computers stop being a science fair prop.
4 comments
Harvested traffic is the real clock, since old ciphertext gets a second life later.
Are they really saying “upgrade” means hybrid keys everywhere first, or just rip-and-replace once the PQ stack settles?
Hybrid first, then maybe rip and replace later, since Kyber beats a pure X25519 flag day.
Hybrid buys time, but the extra handshake bytes hurt mobile and QUIC a bit.