Root Causes: A PKI and Security Podcast
Jun 26, 2026 · 13 min · 7 segments
A new Executive Order (EO) moves the deadline for ML-DSA deployment up to 2031. We talk about why this happened and its implications on government, the technology industry, and enterprises around the…
Jason SorokoHost
Tim CallanHost
So, Jason, we have been tracking the ongoing, what do I want to say, setting and evolution of deadlines around deployment of post-quantum cryptography.
And we saw originally we saw the NIST 2030-2035 suggested recommended deadlines that a lot of people took and adopted.
And then earlier this year, there were a pair of very attention-grabbing announcements within just days of each other, first from Google and then from Cloudflare, where both of these organizations declared that they were going to be entirely PQC by 2029.
Now, I don't recall, correct me if I'm wrong on this, but I don't recall that either of those attempted to set that as a deadline for anybody else.
But they were very obvious, important declarations from very technically astute organizations that understood this very, very directly.
So you and I and a lot of others have been waiting to see if other changes come down, if other deadlines come in.
And recently we saw a pair of executive orders from the White House that are directly relevant to this question.
Read the full transcript.
Create an account to read the whole episode, search across every transcript, and follow the shows you care about.
So, Jason, we have been tracking the ongoing, what do I want to say, setting and evolution of deadlines around deployment of post-quantum cryptography.
And we saw originally we saw the NIST 2030-2035 suggested recommended deadlines that a lot of people took and adopted.
And then earlier this year, there were a pair of very attention-grabbing announcements within just days of each other, first from Google and then from Cloudflare, where both of these organizations declared that they were going to be entirely PQC by 2029.
Now, I don't recall, correct me if I'm wrong on this, but I don't recall that either of those attempted to set that as a deadline for anybody else.
But they were very obvious, important declarations from very technically astute organizations that understood this very, very directly.
So you and I and a lot of others have been waiting to see if other changes come down, if other deadlines come in.
And recently we saw a pair of executive orders from the White House that are directly relevant to this question.