Google's Chrome team has launched a new initiative to protect HTTPS connections from the future threat of quantum computers. The effort focuses on redesigning how digital certificates work so they can withstand quantum-powered attacks without slowing down the web.<\/p>\n
The move follows the formation of a new working group at the Internet Engineering Task Force (IETF) called PLANTS, short for PKI, Logs and Tree Signatures.<\/p>\n
The group is addressing technical hurdles linked to quantum-resistant cryptography, which typically increases the size of data exchanged during TLS connections. Larger certificates can create performance and bandwidth challenges, particularly for systems relying on Certificate Transparency logs.<\/p>\n
Rather than adding larger post-quantum X.509 certificates to its existing root store, Chrome is collaborating with industry partners to develop Merkle Tree Certificates (MTCs). These certificates are being standardized within the PLANTS working group.<\/p>\n
MTCs replace the traditional chain of digital signatures with compact proof derived from a Merkle tree structure.<\/p>\n
Instead of signing each certificate individually, a Certification Authority signs a single "Tree Head" that can represent millions of certificates. Browsers then receive a lightweight proof confirming a site's inclusion in that tree.<\/p>\n
The approach is designed to reduce the amount of authentication data transmitted during a TLS handshake. It also embeds transparency directly into the certificate issuance process, removing the need for separate Certificate Transparency checks.<\/p>\n