Certificate Transparency Monitoring is now Generally Available

Faster and more secure TLS handshakes to your origins, automatically

Cloudflare now takes the guesswork out of TLS 1.3 key agreement with your origins. Automatic key exchange predicts the preferred algorithm and sends its key share in the first ClientHello, helping avoid a HelloRetryRequest and one extra network round trip.

Post-quantum ML-DSA certificates for Authenticated Origin Pulls and Custom Origin Trust Store

Cloudflare now accepts ML-DSA (FIPS 204) post-quantum certificates on the connection between Cloudflare's edge and your origin server.