
10/3/2022 · Bas Westerbaan, Cefan Daniel Rubin
What this post added
This post details the deployment of hybrid post-quantum key agreement for TLS 1.3 connections, making it the default for all websites and APIs served through Cloudflare. It explains the threat of quantum computers to current cryptography, the role of post-quantum cryptography, and the technical details of how TLS 1.3 is adapted to support hybrid key agreements (combining traditional ECDH with PQ KEMs like Kyber). It also discusses the importance of early adoption for identifying and mitigating real-world issues with new cryptographic standards.