Post-quantum adoption, by sector
Traffic recorded today can be decrypted once a large quantum computer exists, unless the connection used post-quantum key exchange. Every week we measure what share of each sector's public websites already negotiates hybrid post-quantum key exchange (X25519 + ML-KEM-768), with real TLS handshakes. Sector totals only: no site is named.
Loading the latest edition…
How this is measured, and what it does not say. Each host gets the same five connections as the free AERE Quantum Readiness scanner, from the AERE Cloud host in the EU. Samples come from the public Tranco ranking and a written rule per sector, so anyone can rebuild the same list from the list ID shown above. The ranking is global, so a sector's sample follows global traffic rather than any one country. Hosts that could not be measured are counted and left out of every share. A share based on fewer than 30 measured hosts is not published. This covers the public TLS edge only: it says nothing about applications, internal systems or keys at rest. Why no names. We publish sector totals, never a list of who is behind. The per-host results are kept; the SHA-256 digest below commits to them, so they cannot be quietly rewritten after publication. The same data is available as JSON: /v1/pq/adoption.