Building a post-quantum certificate authority with Merkle Tree Certificates

* The Web PKI is the ecosystem of policies, protocols, and infrastructure operators ensuring trust for website connections.
* The transition to post-quantum (PQ) cryptography is prompted by the imminent arrival of quantum computers, with a deadline set for upgrade by 2029.
* Certificate transparency requires certificates to be logged in public logs.
* Current CT monitoring compares log records against domain owner expectations and reports suspicious activity.
* The scaling problem involves PQ signatures ballooning the data that CT logs need to store by approximately 40x.
* Merkle Tree Certificates (MTCs) describe an architecture for compact, efficient, post-quantum certificates by batching certificates into a Merkle tree.
* MTCs implement the principle of "issue by logging," making transparency an operational requirement.
* A CA in the MTC ecosystem maintains a transparency log backed by a Merkle tree and operates Mirroring cosigners for consistency.
* Standalone MTCs can contain a cosigned tree head and an inclusion proof, or landmark-relative forms which use lightweight inclusion proofs over cosigned landmarks.
* An experiment with Chrome using a "bootstrap CA" successfully served billions of MTCs.
* Landmark-relative certificates showed a median 9% speed improvement over classical signature chains in testing.

The narrative frames the necessary evolution of trust infrastructure from an additive, burdensome system to an integrated, intrinsically secure architecture by leveraging cryptographic structures like Merkle trees. The core tension lies between maintaining established transparency mechanisms and achieving post-quantum security without incurring unacceptable performance overhead at Internet scale. The introduction of MTCs reframes a known scaling bottleneck—the burden of logging numerous individual certificates—as an architectural opportunity to enforce transparency as a necessary operational constraint, rather than an optional feature bolted on later. This reflects a deeper pattern in large-scale systems where emergent complexity (like quantum resistance) demands not just cryptographic replacement, but systemic re-architecture. The implication is that security innovation at scale requires shifting trust from decentralized log monitoring to verifiable, structured data structures managed by trusted entities (CAs and cosigners). The challenge for the future is moving beyond experimental validation to establish a universally accepted standard among disparate stakeholders—browsers, CAs, and monitors—to ensure this structural redesign is adopted organically rather than mandated piecemeal.
Bridge Questions: If MTCs are the authoritative design, what specific governance mechanisms must be established across independent monitoring entities to ensure that data integrity and resilience are maintained when distributing landmark updates? How should the inherent complexity of managing standalone fallback paths versus streamlined landmark protocols be balanced within client-side security policies? What organizational structures are necessary to foster the required cross-industry collaboration needed to move MTC adoption from successful experiment to global PKI standard?