Cloud & CDN
Cloudflare
Hybrid key exchange is broadly deployed at the edge and is extending to origin connections; authentication remains the major unfinished layer.
PartialVerified through 2026-09-06
Products
1 recordsVerified capability
Cloud & CDN
PartialEdge network and Zero Trust
- Edge key exchange
- Hybrid ML-KEM available on all plans
- Origin connections
- Post-quantum where the origin supports it
- Organisation target
- Full post-quantum security, including authentication, by 2029
CCloudflare first-party posts and radar dataChecked 2026-09-06
Open first-party evidence Do not infer: That origin servers behind the edge are post-quantum protected.
Roadmap explorer
3 dated stepsPublished milestones
- 2022-10shippedC
Post-quantum key agreement enabled broadly
Cloudflare began broad hybrid key-agreement availability at its edge.
Cloudflare post-quantum research - 2025shippedC
Post-quantum connections to origins
Origin-side hybrid key exchange became available where the origin stack supports it.
Post-quantum cryptography to origins - 2029targetC
Full post-quantum security target
Cloudflare targets post-quantum protection including authentication; this remains a forward-looking vendor commitment.
Post-quantum cryptography to origins