Post-quantum authentication to origins is now supported
Curated from Cloudflare Blog
As cryptographic standards evolve, the immediate threat of quantum computing to current public key infrastructure demands proactive mitigation, particularly for internal trust boundaries. This article details Cloudflare’s implementation of post-quantum authentication for origin connections, a critical shift for teams managing sensitive data pipelines. For SREs and DevOps engineers, this is not merely a feature update but a necessary evolution in zero-trust architecture. The integration with Authenticated Origin Pulls and Custom Origin Trust Store ensures that even if traditional algorithms like RSA or ECDSA are compromised, the integrity of the edge-to-origin communication channel remains secure. Practitioners should review their current certificate rotation policies and trust store configurations to assess readiness for hybrid or pure post-quantum cryptographic suites. Start by auditing your origin verification mechanisms to identify potential vulnerabilities before quantum-capable threats become a practical reality.
Cloudflare now supports post-quantum (PQ) authentication when connecting to customer origin servers via Authenticated Origin Pulls and Custom Origin Trust Store. This is the first step towards providing PQ authentication for all Cloudflare products.
— Cloudflare Blog