← Wednesday, September 30, 2026ArchitectureCase study

Merkle Tree Certificates aim to scale post-quantum Web PKI signatures

blog.cloudflare.com by Mari Galicer 11 min read Editor score 7/10

Preview image for Merkle Tree Certificates aim to scale post-quantum Web PKI signatures

The piece presents Merkle Tree Certificates as a way to make post-quantum signatures practical for Web PKI, where simply swapping in new cryptography could hurt performance. Engineers planning large-scale protocol migrations can learn from this design trade-off.

What
Merkle Tree Certificates aim to make post-quantum signatures practical for Web PKI at Internet scale.
How
Cloudflare says its certificate authority will support MTC issuance, with a target of early 2027 for Chrome’s Quantum-resistant Root Store.
Why it matters
MTCs offer engineers a path to upgrade web authentication to post-quantum cryptography without unacceptable performance degradation.
set policies submit certif… root programs CAs public logs
Root programs set CA policies, and CAs submit issued certificates to public logs. Sketched from the article's own text.

Discussion

Discussion is not switched on yet. Use Note above to keep your own thoughts on this story.

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.

Your note

Private to you. Stored in this browser, and synced to your account when you are signed in.