The Internet is Ready for Some PQC Certificates

Explore the challenges and solutions for implementing Post-Quantum Cryptography (PQC) certificates in this 35-minute conference talk that addresses the significant size issues of PQC certificate chains and their impact on system migration plans. Examine the problems caused by full certificate chains using ML-DSA-65 and discover practical alternatives that can be implemented immediately. Learn why some PQC implementation should begin now rather than waiting for future developments, and gain insights into potential PKI architectures following NIST's additional signature competition. Understand the technical considerations, current limitations, and strategic approaches for transitioning internet infrastructure to quantum-resistant cryptographic systems from a principal crypto architect's perspective.