Why we cannot wait for better post-quantum signature algorithms

Cloudflare says the move to quantum-resistant signatures cannot be delayed any longer.

RSA and ECC remain vulnerable to future quantum computers, putting authentication and identity at risk.

NIST standardized ML-DSA in 2024, while FN-DSA and other candidates are still advancing.

ML-KEM is already broadly deployed, but signatures still need a first-wave standard, which means ML-DSA.

Organizations should start migrating now to meet deadlines such as Cloudflare’s 2029 target.