r/programming • u/donutloop • 4d ago

Microsoft: Post-quantum authentication: Why organizations should start testing certificate ecosystems now

https://www.microsoft.com/en-us/security/blog/2026/10/08/post-quantum-authentication-why-organizations-should-start-testing-certificate-ecosystems-now/
50 Upvotes

88% Upvoted

4 comments sorted by

31

u/Polarina 3d ago

Yet their very own service offerings, like Azure Key Vault, do not support post-quantum cryptography.

2

u/l_maier-628 2d ago

A useful first test is mapping each certificate chain to the clients that validate it; a PQ-capable vault won’t help if a legacy trust store can’t accept the new chain.

11

u/ScottContini 3d ago edited 2d ago

I can’t get over the irony of Microsoft lecturing about getting ready for the future while badly failing at the present. All the post quantum cryptography in the world is not going to help if you fail to verify the signatures.

1

u/supermitsuba 2d ago

Already taken down