Cloudflare Develops Public Certificate Authority for Post-Quantum Web Security

Leela Kumili — Mon, 09 Nov 2026 14:35:00 GMT

Cloudflare is developing a public certificate authority for Merkle Tree Certificates (MTCs) to reduce the bandwidth overhead of post-quantum cryptography. A Chrome experiment served billions of MTCs to 50% of Chrome Beta 146 for selected domains, reporting 9% faster median performance. Wider deployment depends on browser support, transparency, and production-scale validation.

By Leela Kumili

Cloudflare’s Post-Quantum GeoKey Manager Enters Closed Beta without Attribute-Based Encryption

Steef-Jan Wiggers — Sat, 31 Oct 2026 19:56:00 GMT

Cloudflare has moved a post-quantum rebuild of GeoKey Manager into closed beta, guarding geo-fenced keys with hybrid ML-KEM-768 and X25519 instead of the attribute-based encryption used since 2022. Keys live only in kernel memory on verified regional servers, and any failed check rejects the request, a fail-closed choice practitioners ask could cause a regional outage. GA is planned for Q1 2027.

By Steef-Jan Wiggers

InfoQ - Quantum Computing

Cloudflare Develops Public Certificate Authority for Post-Quantum Web Security

Cloudflare’s Post-Quantum GeoKey Manager Enters Closed Beta without Attribute-Based Encryption