Post-Quantum Certificates
Summary
The post-quantum certificates article surveys the impact of quantum-resistant TLS certificates on PKI sizes and deployment. It compares ECDSA, RSA, and ML-DSA certificate sizes, introduces Merkle Tree Certificates (MTCs) in standalone and landmark-relative flavors, and discusses how trust anchors and DNS (SVCB records) will influence adoption across browsers and CAs. It concludes that PQC certificates are coming with significant complexity and potential ecosystem bifurcation, requiring new tooling and trust management.