Introducing TLS with Client Authentication

Introduced TLS with Client Authentication for enterprise customers, enabling server-side authentication of clients via unique client certificates. This feature enhances security for IoT, mobile apps, and enterprise networks by ensuring only authorized clients can connect. The handshake process involves the client presenting a certificate signed by a trusted Certificate Authority, which is then verified by the server. Cloudflare offers this functionality at the edge to offload CPU-intensive cryptographic operations, with enforce and report modes, and the ability to forward client certificate fields as custom headers. Cloudflare's open-sourced PKI (cfssl) is provided as a tool for customers to set up their own Certificate Authority.