The title is vague, my first thought was "We already have MLKEM". Which is enough against passive attackers.
The article apparently is about the CA/certs for authenticating the server, a part of HTTPS
Also just now Chrome published https://www.chromium.org/Home/chromium-security/post-quantum...
Also just now Chrome published https://www.chromium.org/Home/chromium-security/post-quantum...