--- title: "Web PKI Reimagined with Merkle Tree Certificates" url: https://daily.dev/posts/web-pki-reimagined-with-merkle-tree-certificates-ancuapixf source_url: https://www.feistyduck.com/newsletter/issue_135_web_pki_reimagined_with_merkle_tree_certificates type: article source: "Feisty Duck" published: 2026-03-31T11:08:26.745Z updated: 2026-03-31T11:08:50.373Z tags: ["quantum-computing"] reading_time: 9 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Web PKI Reimagined with Merkle Tree Certificates **[Feisty Duck](https://daily.dev/sources/feistyduck)** · 9 min read · 0 upvotes · 0 comments ## Summary Google is redesigning Web PKI through Merkle Tree Certificates (MTCs), a next-generation approach that merges certificate issuance with Certificate Transparency to address two major problems: the massive size increase of post-quantum cryptographic signatures and the fragility of the current CT infrastructure. MTCs replace X.509 certificate signatures with inclusion proofs, dramatically reducing handshake size. The design is being standardized at IETF's PLANTS working group with Cloudflare collaboration, with core technology validation planned for 2026 and bootstrapping of the new PKI in 2027. The transition will require servers to support multiple certificate types simultaneously and complex TLS negotiation. Separately, Google has accelerated its PQC migration deadline to 2029, citing new research showing a ~20x improvement in quantum attacks against elliptic curve cryptography and a paper claiming RSA can be broken with only 10,000 qubits. Also covered: Encrypted Client Hello standardized as RFC 9849. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Cloudflare Proposes Merkle Tree Certificates to Solve Post-Quantum TLS Performance Issue](https://daily.dev/posts/cloudflare-proposes-merkle-tree-certificates-to-solve-post-quantum-tls-performance-issue-8jpwvx4ft) · InfoQ · 0 upvotes · 0 comments - [Keeping the Internet fast and secure: introducing Merkle Tree Certificates](https://daily.dev/posts/keeping-the-internet-fast-and-secure-introducing-merkle-tree-certificates-blu0ryjsr) · Cloudflare · 2 upvotes · 0 comments --- Tags: [#quantum-computing](https://daily.dev/tags/quantum-computing) [View this post on daily.dev](https://daily.dev/posts/web-pki-reimagined-with-merkle-tree-certificates-ancuapixf)