PQC Readiness: Browser Trust Deadlines & Enterprise Cryptographic Agility

The clock is ticking for Post-Quantum Cryptography (PQC) migration, but many enterprises may be underestimating the immediate urgency. Recent research reveals that browser trust deadlines are already underway, serving as an unplanned, real-world test of cryptographic agility – a critical capability for the much larger PQC transition. This development underscores that the future of cryptography isn't a distant challenge; it's actively shaping current operational realities.

The Unfolding Reality of Browser Trust Deadlines

ProteQC, a PQC advisory firm, recently highlighted that a significant global browser trust transition is already in motion. Their analysis of Google's root certificate data uncovered 47 Certificate Authority (CA) roots with trust deadlines spanning from July 2025 to September 2027. Strikingly, many of these deadlines have either passed or are imminent, with significant changes taking effect with new browser releases. For instance, while 13 deadlines have technically passed, their impact for most users only materialized with the release of Chrome 153 on September 8th, followed by another 17 deadlines within six weeks, including 13 on September 30, 2026 [2].

While these root certificate rotations are standard browser security maintenance, they expose a crucial gap: the operational readiness of organizations to handle rapid cryptographic changes. This