Bringing authentication and identification to Workers through Mutual TLS
Nov 16, 2022Dina Kozlov

Summary
Introduces the upcoming capability for Cloudflare Workers to use mutual TLS (mTLS) for outbound requests. This allows Workers to present client certificates, enabling server-side authentication and identification of the originating Worker. This addresses limitations of existing methods like Authenticated Origin Pull and token authentication by providing per-Worker granularity, secure HTTP communication, and client identity exposure.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack