Last year, I thought we still had time to design PQ auth systems.
Now, based on the pace of progress and on statements like Google's, I believe
1. we need to finish rolling out PQ kex yesterday
2. we need to start rolling out PQ auth now
3. it's too late to ship any new non-PQ design or system
An overview of how Google is accelerating its timeline for post-quantum cryptography migration.
