VRP 2025 Year in Review
2026-04-02T13:23:41Z•f26f819ff18262e5ff9bc476a0fe884f46628a1628aaa23ff415cb97cc92ebe5
AndroidAndroid-17CA-Browser-ForumChrome-Root-ProgramDCVHTTPSIETF-PLANTSMTCMerkle-Tree-CertificatesPQCTLSVRPandroid-theft-protectionanti-fraudapp-safetycertificate-transparencydomain-control-validationgoogle-play-securitypost-quantum-cryptographyquantum-safescam-protectionvulnerability-rewards
What happened
Collection of Google Security Blog posts (early 2026) covering: the Vulnerability Rewards Program (VRP) 15th anniversary and program growth; Android’s migration to Post‑Quantum Cryptography with PQC experiments and PQC enhancements starting in Android 17; Chrome/HTTPS evolution toward quantum‑safe certificate approaches (Merkle Tree Certificates) and participation in IETF PLANTS; Chrome Root Program and CA/Browser Forum plans to phase out 11 legacy Domain Control Validation (DCV) methods by March 2028; Android scam protections and AI‑driven defenses; Android theft‑protection feature expansions
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- google_security_blog
- Record identifier
- f26f819ff18262e5ff9bc476a0fe884f46628a1628aaa23ff415cb97cc92ebe5
- Enrichment time
- 2026-04-02T13:23:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.