People will take actions when the threat is against their livelihood, health and homes, particularly when there is no action being taken on their behalf. Their risk assessment may be different than yours.

Thinking something should be done, means nothing is being done. The poor in france didn't start with bread riots. They begged and pleaded and asked nicely first, and while lots of people thought something should be done to help them, nothing was.

Thank you for getting over the line.

You know this, stop pretending otherwise.

Drawing an equivalence is foolish.

> anyway, someone popular among some people in tech (the cryptographer Dan Bernstein) has been trying (successfully) to slow the PQC transition for ~10 years

Sounds enough like throwing shade to make me doubt it's value, in absence of other signals.

My point was your history of posting knowledgeably about security and cryptography provides the credibility for me to go do more reading about the stuff in mswphd's post.

Granted cloudflare also does DDOS protection, and that makes sense for an API. For that you could do some DDOS protection without stripping TLS, but it can only protect against volumetric attacks like syn/ack floods and not against attacks that are establishing full TCP connections and overwhelming the app server. (rate limiting incoming connections can go a long way, but depending on details, it might still be enough to overwhelm the serving resources, your use case is up to you to understand).

This includes things I have expertise in.

And a US colony/territory for the 43 years before Japan invaded. They were ruled by a US puppet state in a supposed "transition to independence" at the time Japan invaded, however it's unclear how much actual independence they would have had in practice.

I mention this because:

1. The way you state it makes it sound like they were somehow independent before the war.

2. It explains why MacArthur was there with the US army to resist the Japanese invasion from the first day it happened (Dec 7, 1941)

3. Its history worth looking into to contextualize just how bad the US has always been at taking over places. Acting as if this is post WW2 (as the media does) is counter-productive to truly understanding the number of really botched invasions the US has done.

Evidence for this is in the number of articles that talk about simulated annealing/quantum annealing (or other optimization problems) w/r/t QC rather than crypto. Sure attention seeking headlines always focus on prime factoring, and the security aspect has a lot more enthusiast interest, but when you look past that into deeper stuff, a lot of the focus is on the optimization.

And many industries can dramatically benefit from better optimization - think about how many companies are at their core bin-packers or traveling salesmen.... off the top of my head anything in logistics, airlines, many aspects of the energy sector, and on and on.

The flash is in reading secrets, the money is in quantum annealing.

It was a nice tradition but, like many things, the scene got too big and corporate. It was a zombie tradition for a while then slowly faded away.

In fact when cloudflare started releasing serious things on 4/1, I found it to be a refreshing subversion of the trope.