Post-quantum cryptography, and what's actually shipping

Some notes on where post-quantum cryptography has actually landed in TLS, and where it hasn’t.