VRP 2025 Year in Review
2026-04-02T07:23:47Z•c0bc05c2c36ff34dbe2a844c7c2446f16724414c349215bb203d1ecc7deac851
AndroidAndroid 17CA/Browser ForumCertificate TransparencyChromeDCV deprecationDomain Control ValidationGoogle PlayHTTPSIETF PLANTSMTCMerkle Tree CertificatesNIST PQCPQCPost-Quantum CryptographySC-080SC-090SC-091TLSVRPapp ecosystem securitybug bountyscam protectiontheft protectionvulnerability rewards
What happened
Compilation of Google Security Blog updates (2025–2026): Google VRP celebrated its 15th anniversary and reported continued expansion of bug-bounty coverage and researcher engagement. Android is beginning staged deployment of Post‑Quantum Cryptography (PQC) enhancements (tests in Android 17 beta, GA in Android 17) as part of a multi‑year migration guided by NIST PQC standards. Chrome/partners are developing quantum‑safe HTTPS mechanisms (Merkle Tree Certificates) via the IETF PLANTS working group; Chrome does not plan to add traditional X.509 PQC certs to its Root Store immediately. The Chrome/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- google_security_blog
- Record identifier
- c0bc05c2c36ff34dbe2a844c7c2446f16724414c349215bb203d1ecc7deac851
- Enrichment time
- 2026-04-02T07:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.