draft-reddy-lamps-x509-pq-commit

X.509 Extensions for PQC or Composite Certificate Hosting Continuity

groupnone stateactive pages12 rev01 expires2026-08-29 canonicalhttps://datatracker.ietf.org/doc/draft-reddy-lamps-x509-pq-commit/
This document specifies a new X.509 certificate extension, Post- Quantum or Composite Hosting Continuity (PQCHC), which enables a certificate subject to signal a intent to continue serving PQC or composite certificates for a defined continuity period after certificate expiration. This extension helps relying parties detect downgrade and man-in-the-middle (MitM) attacks during transition phases, where a cryptographically relevant quantum computer (CRQC) would make traditional certificates insecure.