Is your domain using post-quantum encryption? Now you can see for yourself

This post introduces new post-quantum (PQ) cryptography visibility tools within Cloudflare's Application Security and Logs products. Customers can now inspect and graph the adoption of post-quantum TLS 1.3 encryption for live traffic via Logpush, Log Explorer, and the HTTP Traffic Analytics dashboard. The feature surfaces the key exchange algorithm negotiated on every incoming request, providing per-connection telemetry. This allows customers to audit their post-quantum posture, assess compliance, and identify cryptographic gaps. The post details the hybrid ML-KEM approach in TLS 1.3, where ECDHE over X25519 and ML-KEM are executed together. It also highlights the distinction between visitor-to-Cloudflare connections (70% PQ adoption) and Cloudflare-to-origin connections (15% PQ adoption) as seen on Cloudflare Radar. New filtering terms for key exchange groups are available in the HTTP Traffic dashboard.