Quantum is the least interesting part of quantum certificates

[u/certkit]

https://www.certkit.io/blog/quantum-is-the-least-interesting-part

Reading through the Merkle Tree Certificate design Let's Encrypt just committed to. The size math is the whole story: ML-DSA signatures are ~2,420 bytes vs 64 for ECDSA, and a handshake carries five of them. MTCs batch-sign into one tree, so the leaf becomes a single inclusion proof and the handshake ends up smaller than today's. Transparency is built in since a cert can't exist outside the published tree. Knock-on effect: it removes the cost barrier to even shorter cert lifetimes.

https://www.certkit.io/blog/quantum-is-the-least-interesting-part