Source: Ars Technica (All)
Original link: https://arstechnica.com/security/2026/02/google-is-using-clever-math-to-quantum-proof-https-certificates
Merkle Tree Certificate support is already in Chrome. Soon, it will be everywhere.
Pulse — Google quantum-proofs HTTPS by squeezing 2.5kB of data into 64-byte space
Source: Ars Technica (All)
Link: https://arstechnica.com/security/2026/02/google-is-using-clever-math-to-quantum-proof-https-certificates
Pulse (AI Failure):
No AI failure reported—Google advances quantum-resistant HTTPS certificate compression.
The What:
Google has implemented Merkle Tree Certificate support in Chrome, enabling compression of approximately 2.5 kB of HTTPS certificate data into a 64-byte space. This cryptographic innovation aims to future-proof HTTPS against quantum computing attacks by enhancing certificate efficiency and security. The rollout is underway, with broader adoption anticipated.
The Why (Governance Gap):
Unknown from source excerpt. No AI-related governance failure or operational breakdown is indicated. Verification needed on whether the deployment includes AI components for certificate validation or management, and if so, how governance protocols address potential risks.
The How (Frameworks & Laws):
While this development is primarily cryptographic and not an AI failure, any AI systems involved in certificate management would fall under the EU AI Act’s High-Risk AI system category if they impact critical infrastructure security. Obligations would include rigorous risk management and transparency. The NIST AI RMF’s GOVERN and MEASURE functions would ensure governance and continuous monitoring of AI components. ISO/IEC 42001’s AIMS controls would mandate impact assessments to evaluate security and compliance risks.
System Design (Prevention):
For AI-assisted certificate management, integrating Runtime Monitoring to detect anomalies or drift in cryptographic validation models is essential. Refusal Triggers based on confidence thresholds should prevent acceptance of compromised certificates. Sandboxed execution environments would isolate AI agents handling certificate data to prevent unauthorized data egress or manipulation. Employing Retrieval-Augmented Generation (RAG) with verified Golden Datasets ensures cryptographic proofs rely on trusted data sources.
—
Source: Ars Technica, 2026-02
https://arstechnica.com/security/2026/02/google-is-using-clever-math-to-quantum-proof-https-certificates