VRP 2025 Year in Review
2026-04-01T13:23:44Z•bfa34ab1c7be40a964bbc114fc50e286f90683a0db530732c556ce93ae616d84
Android-17Android-securityCA/Browser-ForumChromeGoogle-Play-safetyHTTPSMerkle-Tree-CertificatesPKIPQCVRPapp-ecosystembiometricsbug-bountycertificate-transparencydomain-validationpost-quantum-cryptographyscam-protectiontheft-protectionvulnerability-rewards-program
What happened
Collection of Google Security Blog updates covering programmatic and product security advances in 2025–2026. Key items: Google’s Vulnerability Rewards Program (VRP) celebrated its 15th anniversary and expansion; Android is beginning deployments of post-quantum cryptography (PQC) starting with Android 17 beta and planning a multi-year migration; Chrome and partners are developing quantum-resistant HTTPS approaches (Merkle Tree Certificates) rather than immediately adding PQC X.509 roots; the Chrome Root Program and CA/Browser Forum are phasing out legacy domain validation methods (SC‑080/SC‑090
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- google_security_blog
- Record identifier
- bfa34ab1c7be40a964bbc114fc50e286f90683a0db530732c556ce93ae616d84
- Enrichment time
- 2026-04-01T13:23:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.