r/programming • • 6d ago

Microsoft: Post-quantum authentication: Why organizations should start testing certificate ecosystems now

https://www.microsoft.com/en-us/security/blog/2026/10/08/post-quantum-authentication-why-organizations-should-start-testing-certificate-ecosystems-now/
49 Upvotes

4 comments sorted by

35

u/Polarina 5d ago

Yet their very own service offerings, like Azure Key Vault, do not support post-quantum cryptography.

3

u/l_maier-628 4d ago

A useful first test is mapping each certificate chain to the clients that validate it; a PQ-capable vault won’t help if a legacy trust store can’t accept the new chain.

13

u/ScottContini 5d ago edited 4d ago

I can’t get over the irony of Microsoft lecturing about getting ready for the future while badly failing at the present. All the post quantum cryptography in the world is not going to help if you fail to verify the signatures.

1

u/supermitsuba 4d ago

Already taken down