Cloudflare to launch quantum-resistant certificate authority
Cloudflare plans to become a public Certificate Authority capable of issuing both traditional TLS certificates and new quantum-resistant 'Merkle Tree Certificates,' with full-scale issuance expected in the first quarter of 2027. The company will acquire root certificate key material from GlobalSign and seek inclusion in major browser root programs to ensure legacy compatibility. The initiative is designed to address quantum-era security threats and strengthen web authentication.
- Issuing both classical and quantum-resistant certificates
- Full rollout of Merkle Tree Certificates in Q1 2027
- Acquiring GlobalSign's root certificate to ensure compatibility
- Applying for inclusion in Google, Apple, Microsoft, Mozilla root stores
- Aims to address the security risk of quantum decryption
Sources covering this
How it unfolded
- The Quantum Insider Cloudflare Plans Public Certificate Authority for Post-Quantum Security
- Dark Reading Cloudflare Announces Public Certificate Authority for the Post-Quantum Web
- Quantum Computing Report Cloudflare Launches Public Certificate Authority to Secure the Web Against Quantum Threats
- Ars Technica Cloudflare plans to issue quantum-safe TLS certificates
In this story
More in Cybersecurity
AI accelerates discovery of high-risk software vulnerabilities
Google’s Threat Intelligence Group reported that monthly vulnerability disclosures have doubled this year, increasing from 5,045 in…
OpenAI disrupts novel AI distillation attack it links to China
OpenAI announced it has stopped a coordinated attempt to extract and distill reasoning capabilities from its AI systems, attributing a…
Cisco SD-WAN Manager vulnerability actively exploited
Cisco has disclosed a critical security vulnerability (CVE-2026-76504) in Catalyst SD-WAN Manager that is being exploited by attackers.
Unpatched Zimbra flaw exploited to steal emails and credentials
A critical security vulnerability in Zimbra Collaboration Suite has been exploited by attackers to access emails and authentication data…