Two papers came out last week that suggest classical asymmetric cryptography might indeed be broken by quantum computers in just a few years.

That means we need to ship post-quantum crypto now, with the tools we have: ML-KEM and ML-DSA. I didn't think PQ auth was so urgent until recently.

https://words.filippo.io/crqc-timeline/

A Cryptography Engineer’s Perspective on Quantum Computing Timelines

The risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.

@filippo I'm still firmly in the camp of those believing that QC is largely stock market manipulation and a snake oil fuelled research grant grift... BUT...
Equally, if we have the post-QC crypto math, it only makes sense to use it. I don't see thee downside.
@tmcfarlane I think Scott Aaronson frequently makes the case that the answer to "stock market manipulation or actual progress" is "both, by different companies."