Cloudflare rolls out post-quantum encryption for enterprise users

Cloudflare plans to expand post-quantum encryption across its services—particularly its Zero Trust suite (identity access, secure web gateway, WARP)—as part of a broader migration aligned with NIST’s post-quantum standards, including progress on key agreement using CRYSTALS-KYBER and early work on digital signature updates. Motivated by NIST guidance and concerns over harvest-now-decrypt-later threats, the initiative aims to future-proof a large portion of web traffic despite uncertainty over the timeline for cryptographically relevant quantum computers.