Building a certificate authority for the whole Internet

Cloudflare announces its intent to become a public Certificate Authority (CA). This involves applying for inclusion in major root programs, acquiring GlobalSign's established root for broad compatibility, and developing a new root for future standards like post-quantum cryptography. The CA will be ACME-first, support Merkle Tree Certificates (MTCs) for post-quantum security, and focus on resilience through transparency, reproducible builds, and fail-small principles. Cloudflare will use its own CA for its internal operations as 'Customer Zero'.