Cloudflare moves up its post-quantum deadline as researchers narrow the path to Q-Day

Cloudflare announced a plan to complete post-quantum security across its product suite by 2029, prioritizing post-quantum authentication due to advances in quantum hardware, error correction, and algorithmic improvements (including research suggesting lower qubit requirements to break P-256 and RSA-2048). The report outlines intermediate milestones (mid-2026 to early-2028), sector readiness gaps, the risks posed by long-lived keys and supply chains, and recommended mitigations such as key rotation, PQ HSTS, certificate transparency, and making post-quantum support a procurement requirement.