[tptacek]

For what it's worth, cryptography engineers were generally not happy with the Dragonfly PAKE, and PQC was a legitimate concern even in 2012.

[ignoramous]

For those curious, a more elegant PAKE family is being formalized:

CPace (balanced): https://datatracker.ietf.org/doc/draft-irtf-cfrg-cpace/

OPAQUE (augumented): https://datatracker.ietf.org/doc/rfc9807/