Cloudflare automates post-quantum key-exchange selection for origins
The September rollout addresses the proxy-to-origin TLS connection, which needs its own migration evidence.
7 articles
The September rollout addresses the proxy-to-origin TLS connection, which needs its own migration evidence.
The December 2025 white paper treats cryptographic change as an operational capability spanning software, hardware and organizations.
The October 2025 release illustrates why post-quantum feature lists need to identify the supported operation.
Cloudflare's 2026 rollout, NIST's agility guidance and OpenSSL's release history expose three different kinds of migration evidence.
Post-quantum key establishment and digital signatures serve different roles and need separate compatibility and migration checks.
A migration plan begins by locating cryptography, dependencies, owners, and acceptable rollback paths.
A useful test defines the supported version, peers, measurements, failure behavior, and the controlled way back.