WebPKI Observatory — Cryptographic Posture
Root certificate algorithms and key sizes reflect multi-decade trust store lifecycles, with legacy SHA-1 and 1024-bit RSA roots still present alongside modern cryptographic standards. The transition to post-quantum cryptography will require coordinated root rotation across 335 trust store entries and 88 CA operators, a process complicated by the trust store disagreement documented in the trust surface analysis. Current cryptographic posture remains dependent on roots issued before modern algorithm agility requirements existed.