Cybersecurity Awesomeness Podcast

The episode contains a handful of useful data points (Google/Cloudflare revising their quantum-safe deadline, Cambridge's 200-qubit purchase) and a serviceable distinction between Harvest Now Decrypt Later risk and future Q-Day risk, but large stretches are filled with host commentary, repetition, and platitudes that dilute the useful material across 16 minutes.

“the leaps and bounds in technology are happening day in day out with the increasing qubits and the size of compute power of quantum computing that that date that mythical q date is getting closer and closer”

“it's not because quantum computing is getting that much faster It because they realising the amount of quantum computing power required to break existing cryptography is a lot less than they initially thought”

Most content recycles widely-circulated PQC talking points (Harvest Now Decrypt Later, Q-Day timelines, lattice-based crypto) without adding a novel angle; the one mildly differentiated idea - that key management matters as much as the algorithm choice - is mentioned briefly and not developed.

“one of my hates really when we're talking about post-quantum is people focus just on the algorithm the algorithm is the mathematical path the important bit is the encryption keys”

“the problem with our industry as a whole is that when you mention security, people automatically think network and infrastructure security because that's what they've done for 20 years”

Simon Pamplin is a working vendor CTO with nearly two decades of direct product experience in encryption, which is relevant and practitioner-level, but the episode functions partly as a vendor promotional vehicle for CERTES, limiting the candor and depth you'd expect from a purely independent expert.

“what we've done recently is apply the NIST-standardised post-quantum algorithms to the solutions that we've been selling to various customers for close on 20 years now, believe it or not”

“So last year I was saying that I believed that Q day was within five years. So I was looking at the 2029, 2030 mark. Google's backing me up on that.”

There are a handful of concrete specifics - Google and Cloudflare revising their quantum-safe deadline from 2035-2040 to 2029, Cambridge's 200-qubit commercial purchase, NIST-standardised algorithms - but no customer case studies, breach data, cost figures, or named CVEs to back up broader claims about data loss risk.

“Google and Cloudflare came back with a reassessment of their own internal infrastructure that had to be quantum safe by 2029. And that's down from previously 2035 or 2040 that people were talking about”

“the University of Cambridge in the UK has just purchased its first quantum computer with 200 qubits”

The host questions are bundled and broad (asking simultaneously how PQC works AND when Q-Day arrives), follow-ups mostly echo and affirm the guest rather than probe or challenge, and a significant portion of airtime is consumed by host monologues that crowd out guest depth.

“It's a two part question. The first part is how, so traditional encryption really relies on the difficulty of factoring large prime numbers. How does post-quantum cryptography work differently than traditional encryption? And then finally, when do you think Q-Day is going to be?”

“We already told him that we wouldn't. And really just wanted to have a general conversation.”