Browsers and CDNs have begun rolling out hybrid key exchange that pairs classical and post-quantum schemes. The migration is early, but harvest-now-decrypt-later threats are pushing it forward.