Cloudflare Launches Post-Quantum Authentication for Origin Connections

Cloudflare has implemented post-quantum authentication for connections to customer origin servers, enhancing security against future quantum computing threats. This follows the resolution of a TLS compatibility incident that affected earlier deployments. Administrators can now utilize ML-DSA certificates combined with X25519MLKEM768 hybrid key exchange to secure both authentication and session keys. The move is part of Cloudflare's broader strategy to achieve full post-quantum security by 2029, addressing the risks of quantum attacks on classical credentials. The company has previously enabled post-quantum encryption for visitor-to-Cloudflare connections in 2022 and 2023. This development is crucial as quantum computing advancements threaten existing cryptographic standards, prompting a shift in security protocols across the industry.

Key Points: • Cloudflare now supports post-quantum authentication for origin server connections. • ML-DSA certificates and hybrid key exchange enhance security against quantum threats. • The implementation follows the resolution of a TLS compatibility issue.