VRP 2025 Year in Review

2026-03-31T19:23:42Z7c0c1f4a4e308082ad27583cafef49f3405321657b1e3ba8909690540821c4b2
Android 17Android scam protectionCA/Browser ForumCertificate TransparencyChrome Root StoreGoogle Play securityHTTPSMTCMerkle Tree CertificatesPKIPLANTS IETFPQCSC-080SC-090SC-091TLSVRPbug bountydomain validation deprecationidentity checkpost-quantum cryptographytheft protection

What happened

A collection of Google Security Blog updates (late 2025–early 2026) covering programmatic and platform security initiatives rather than specific software vulnerabilities. Key points: Google VRP celebrated its 15th year and expanded rewards; Android begins PQC testing (Android 17 beta) as part of a multi-year post-quantum migration; Chrome and partners are developing Merkle Tree Certificates (MTCs) and a PLANTS IETF effort to make HTTPS quantum-safe while deferring inclusion of PQC X.509 roots in the Chrome Root Store for now; the CA/Browser Forum and Chrome Root Program are phasing out legacy,

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
google_security_blog
Record identifier
7c0c1f4a4e308082ad27583cafef49f3405321657b1e3ba8909690540821c4b2
Enrichment time
2026-03-31T19:23:42Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · VRP 2025 Year in Review · Baitaphish