How ready is the Internet for
post-quantum cryptography?
We measured one million public HTTPS endpoints to see what has been deployed, who is driving adoption, and which parts of the transition still lag behind.
MEASURED JUL 2025 TO MAR 2026 · HTTPS ENDPOINTS
One study. Eleven perspectives.
The same measurement client, looking at websites from different parts of the world.
Markers show approximate city or state locations, not exact scanning endpoints. Land: Natural Earth.
Six ways to explore the transition.
Start with the basics, or go straight to the numbers.
Why change encryption?
What quantum computers could change, and what the web is doing about it.
What is being adopted?
One hybrid approach dominates. Website authentication tells a different story.
Who is driving adoption?
Explore the role of the platforms behind the endpoints we visit.
How do sectors compare?
From online shopping to public services, adoption is uneven.
How do countries compare?
A closer look at national websites and government services.
Does newer mean safer?
Post-quantum protection is one part of a website’s security.
Post-Quantum TLS Finished the Easy Half
ACM examines what our findings mean for the next phase of the post-quantum transition.
- Cloudflare
- Mozilla
- NIST
Meet the team.
Researchers from UNSW Sydney and Georgia Tech.
Mind the Gap: Policy vs Reality in Post-Quantum TLS Deployment
Nimesha Wickramasinghe · Frank Li · Sanjay Jha · Arash Shaghaghi
ACM Internet Measurement Conference 2026