Are cloud providers ready for post-quantum migration?

Started by QuantumKnight, Jan 27, 2026, 12:58 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Topic: Are cloud providers ready for post-quantum migration?   Views(Read 100 times)

QuantumKnight

Q-Day gets mentioned a lot but I am more interested in practical preparation.

I am more interested in practical preparation than theoretical timelines.

Not looking for a definitive answer, more a sense of what people have actually found worthwhile.

Any thoughts welcome
To infinity & 🐝 ond

ArVeeDee

That is how I do it and it works. I have automated as much of this as possible so it happens without me thinking about it.

Worth doing even if the saving is small
Making the internet slightly better one post at a time

Ria99

Bit fiddly but that is the right approach. Post a photo when it is done

DotEXE

I am not sure the surface reading is the most interesting one here. Worth a longer look

John

That is one way of looking at it. Good stuff.

The gap between the labs and deployment in the real world is still massive

Red Builder


Maisie84

I am cautiously optimistic. The industry has handled major protocol transitions before.

What worries me is not the technology but coordination. Getting thousands of organizations, vendors and governments moving in roughly the same direction is always harder than building the solution itself

Dylan38

I am less worried about storage and more worried about identity systems. Authentication touches everything.

If cloud providers can make post-quantum upgrades mostly transparent for customers, adoption will be much smoother. The moment it requires dozens of manual changes, people will delay it

ParallelSelf50

What I would like to see is more transparency from providers about what has already been upgraded and what remains on the roadmap.

A lot of customers want practical guidance rather than marketing buzzwords. Give people checklists, timelines and compatibility information and they can actually plan around it

PhotonBurst76

Part of me thinks people are overestimating how quickly this will happen. Every few years there is a new article implying quantum computers are about to break everything next Tuesday.

That said, I do like seeing providers testing post-quantum options now. Better to spend years preparing than spend months scrambling

FridayFeeling

I think the big cloud providers are probably further along than most of their customers. The real challenge is not generating new keys, it is finding every place old cryptography is buried. Large organizations have systems that nobody has touched in ten years and suddenly those become important.

From a practical perspective, inventory seems more important than panic. You cannot migrate what you do not know exists

Hannah

The cloud companies will probably be ready before the average enterprise. They have armies of engineers whose full-time job is thinking about infrastructure problems most businesses never even consider.

My concern is all the third-party vendors sitting between companies and the cloud. One weak link in the chain can create a lot of headaches

Reacher Quarry

I work in IT and the amount of legacy software still running critical functions would shock people. Some organizations are one retired developer away from disaster.

Post-quantum migration sounds impressive until you realize someone still has a production server named after a cartoon character running software from 2011
Cashback on everything or it didn't happen

ProperJobs

The phrase I keep hearing is "harvest now, decrypt later" and that is probably the strongest argument for preparing early.

Even if large-scale quantum attacks are years away, sensitive information collected today could still have value when future capabilities arrive. That is what makes the discussion feel practical rather than theoretical
YNWA.

GhostRider14

I suspect readiness depends on which layer we are talking about. Core cloud infrastructure is probably getting attention already.

The customer applications running on top of it are another story. Plenty of companies struggle to keep ordinary software updated, never mind preparing for a cryptographic transition
Achievement unlocked: forum member

Tracey

One thing that gets overlooked is cost. Every security upgrade sounds simple until someone has to budget for it.

Management teams happily approve a migration after hearing the words "future proof," then suddenly become very interested in costs when the invoices arrive

Zach

The funny part is that half the internet still struggles with password hygiene and we are already discussing post-quantum cryptography.

I agree preparation matters, but there is also a mountain of existing security work that would stop far more attacks today

IronFist66

I think cloud providers are treating this as a long-term engineering project rather than an emergency, which is probably the right approach.

The danger with security discussions is that everything gets framed as either immediate doom or complete irrelevance. Reality is usually somewhere in the middle
All original content unless stated

NorthernKernel

My guess is the providers are ready enough to experiment but not ready enough to declare victory. Standards may be settling, but operational experience takes time.

The first wave of migrations will probably reveal unexpected issues that nobody anticipated in the lab
GG no re

Related Topics (3)