A Post-Quantum Future for Let's Encrypt

letsencrypt.org
June 3, 2026
6 min read
63/100
Summary
Let’s Encrypt is developing Merkle Tree Certificates (MTCs) to ensure a post-quantum-safe Web PKI. MTCs aim to provide post-quantum authentication while maintaining the speed and reliability of TLS.
Key Takeaways
- Let’s Encrypt is pursuing Merkle Tree Certificates (MTCs) to establish a post-quantum-safe Web PKI without compromising speed and reliability.
- The NSA and NIST are transitioning to post-quantum algorithms by 2035, influencing the broader Web PKI ecosystem to adopt similar timelines.
- Post-quantum authentication is becoming urgent due to the potential threat of cryptographically relevant quantum computers (CRQCs) that could forge signatures in real time.
- MTCs allow for batch certificate issuance with a single signature, potentially reducing the size and improving the efficiency of TLS handshakes compared to traditional methods.
Coverage & discussions
Hacker News · letsencrypt.org
Community discussions
Community Sentiment
Positives
- Post-quantum authentication is becoming an urgent issue that the Web PKI ecosystem must address, especially for long-lived keys that are high-value targets.
- Merkle Tree Certificates represent a significant advancement by discarding outdated practices while maintaining essential security features, potentially improving performance.
- The smaller authentication path in MTC handshakes, even with post-quantum algorithms, indicates a promising direction for more efficient security protocols.
Concerns
- Concerns about the practicality of quantum-safe encryption persist, as the capabilities of quantum computing remain uncertain and theoretical.
- The transition to new cryptographic methods like Merkle Tree Certificates could introduce significant challenges, including potential downsides related to state syncing and validation processes.
- Skepticism exists regarding the revolutionary impact of quantum computing, with some viewing it as an expensive solution for niche problems rather than a transformative technology.
Related Articles

A Cryptography Engineer's Perspective on Quantum Computing Timelines
Apr 6, 2026

Web Security is Too Hard
Aug 4, 2026

An update on residential proxies and the scraper situation
Jul 10, 2026
![[Announce] GnuPG 2.5.19 released](https://pub-90f0ac00d93c47daac3e1d2cdd28d496.r2.dev/articles/99f5ad78fe771a05da2b0896369027eb.webp)
GnuPG – post-quantum crypto landing in mainline
Apr 26, 2026

Safeguarding cryptocurrency by disclosing quantum vulnerabilities responsibly
Mar 31, 2026