Post-Quantum Cryptography (PQC) Migration Looks Daunting. It Isn't If You Narrow the Problem.
F5, Thursday, October 8th, 2026
F5's Joel Moses says organizations should narrow post-quantum cryptography migration to their most exposed systems first.
F5's Joel Moses acknowledges that post-quantum cryptography (PQC) migration is a multi-year effort, since cryptography is embedded across web transactions, VPNs, certificates, applications and data.
He argues the biggest mistake is assuming everything must change at once, because the quantum threat affects different forms of cryptography differently, though narrowing immediate exposure does not remove the technical debt PQC can expose.
He cites F5 Labs research finding that 10% of top websites still lack TLS 1.3, which PQC ciphers require.