"Harvest Now, Decrypt Later" - and Nobody Cares

The quantum threat isn't some distant apocalypse. It's happening now - just slowly enough that no one feels responsible.

Attackers are collecting encrypted data today, confident that tomorrow's quantum machines will crack it open like a cheap lock.

And why wouldn't they? Most defenders are busy chasing compliance checkboxes and pretending RSA will hold forever.

Everyone talks about “zero trust,” but they still trust 90s-era cryptography in a world that's moving toward post-truth, post-ethics, and soon, post-quantum.

The uncomfortable reality: If your secrets can't survive a decade on ice, they're already compromised.

And if your org isn't even thinking about post-quantum resilience, it's not security - it's theater.

But hey, at least the slide decks look good.

I tricked all crackers and agencies back in 2002 or something.

I just made everything public.

Eat that - spy vs spy

Fun Fact: Your source can be open but still be your own property.
You won't win noodles with that - easily - but it feels cozy.

You need a userlevel of 1000 to see this content.

Let's focus on free WC Certs

Good. Making it all public is one way to short-circuit the surveillance game. Deny the spies their leverage by leaving nothing hidden.

But exposure isn’t edgy anymore. It’s the norm.

And free WC certs? Nice for now. But once quantum hits, even those can be faked - unless they’re backed by real post-quantum crypto.

Trust based on pre-quantum math is already a ticking clock.

I still like the idea of user defined text that can be printed at the cert for verification. the user defined content can change anytime on their behalf.
Hard to crack arbitrary information like the wording - "penguin tamer hometown here. Hello new company name here for current date here!" - when showing the certs for quangntenemy.
Be Creative!

A mathematician would maybe babble about entropy and it's probably pre-cpu auth.

does it solve a problem?

I actually like quangntenemy's idea of using post-quantum crypto for certificate verification. It would help cement the idea that WeChall really is actively engaging in learning new things in cybersecurity.