Cloudflare stops guessing at post-quantum handshakes across 45 billion daily connections
Automatic Key Exchange measures each TLS 1.3 origin, removes a retry round trip and defaults capable servers to hybrid key exchange.
By RuntimeWire Staff · Published
Primary source: The Cloudflare Blog
Why it matters
Post-quantum migration will stall if every website operator must audit algorithms and middleboxes by hand. Cloudflare is using its network position to turn that work into a measured default while removing a round trip from compatible connections.

Cloudflare, the network and security provider co-founded by Matthew Prince (@eastdakota), launched Automatic Key Exchange on September 8th, a system that tests customer origin servers and selects the strongest key-agreement method they can handle before production traffic arrives.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.