Post-quantum website certificates from Cloudflare are scheduled for early 2027
Cloudflare will become a public certificate authority and plans post-quantum Merkle Tree Certificates in early 2027.
Cloudflare said it will become a public certificate authority, issuing conventional certificates and post-quantum Merkle Tree Certificates, with production MTC issuance planned for the first quarter of 2027. It agreed to acquire publicly trusted root key material from GlobalSign, expecting the deal to close within two months, so certificates work on older devices. Applications to the Chrome, Apple, Microsoft, and Mozilla root programs are pending, and classical issuance starts only after acceptance. MTCs, co-authored by Cloudflare as an IETF draft, use lightweight proofs so browsers can avoid sending heavy post-quantum signatures on every connection.