Post-Quantum HTTPS Migration Faces Security Challenges

Chromium has announced a roadmap for post-quantum HTTPS server authentication, which includes a phased transition to post-quantum key exchange methods. The first stage has been implemented, allowing for hybrid post-quantum key agreement while still supporting classical options, which poses a risk of downgrade attacks. The roadmap emphasizes the need for a post-quantum-capable PKI to ensure robust security, but this is a long-term goal. Security professionals are particularly concerned about cookie management across different origins, as domain-scoped cookies can be exploited by insecure sibling origins. The implementation of the proposed HTTP Require-Post-Quantum (HRPQ) header aims to address these issues but introduces its own complexities. As of now, the rollout is ongoing, and organizations must prepare for potential compatibility issues during the transition.

Key Points: • Chromium's roadmap for post-quantum HTTPS authentication is underway but complex. • Current implementation allows hybrid key exchanges, risking downgrade attacks. • Cookie management across origins poses significant security challenges.