OpenSSH Just Added Quantum-Resistant Keys. Nobody Will Use Them for Years.
OpenSSH 10.4 introduces post-quantum keys — but leaves them opt-in, repeating a pattern that took three years to resolve last time. Meanwhile, legacy algorithms like hmac-sha1 remain enabled by default. The real story isn’t the arrival of quantum-resistant crypto. It’s the multi-year gap between innovation and adoption, where your infrastructure sits exposed on both ends.