39 minutes ago
More and more servers are supporting X25519MLKEM768, but if key exchange is supposedly becoming post quantum, why is authentication still classical? lol
Are we being given a false sense of security?
I get that KEMs and signatures solve different problems, but if someone can break RSA/ECDSA tomorrow, what's the point of trusting the server?
HNDL suddenly makes way more sense now...
Oh, but I still see people saying WireGuard + PSK is already quantum safe. Really?
Anyone who's played around with TLS, Noise or PKI have any thoughts on this? Because PQC enabled and actually quantum resistant aren't the same thing.
Are we being given a false sense of security?
I get that KEMs and signatures solve different problems, but if someone can break RSA/ECDSA tomorrow, what's the point of trusting the server?
HNDL suddenly makes way more sense now...
Oh, but I still see people saying WireGuard + PSK is already quantum safe. Really?
Anyone who's played around with TLS, Noise or PKI have any thoughts on this? Because PQC enabled and actually quantum resistant aren't the same thing.