> Google and others have experimented with it for https and it worked fine To be clear, Google didn't experiment with actually using post-quantum crypto. Their

> Google and others have experimented with it for https and it worked fine To be clear, Google didn't experiment with actually using post-quantum crypto. Their experiment was to figure out what was the largest key sizes that browsers and networks would accept before you start degrading connections. Their "post-quantum keys" were just padding bytes. This was gone through in the Bernstein and Lange talk this year at 35C3[1]. This is a good thing, given the history of the security of post-quantum candidates[2]. [1]: https://youtu.be/ZCmnQR3_qWg?t=1457 https://youtu.be/ZCmnQR3_qWg?t=1457 [2]: https://youtu.be/ZCmnQR3_qWg?t=208 https://youtu.be/ZCmnQR3_qWg?t=208