
9/24/2025 · Sharon Goldberg, Tochukwu Nkemdilim (Toks), Koko Uko
What this post added
The WARP client (consumer 1.1.1.1 and Cloudflare One Agent) now supports post-quantum key agreement, enabling MASQUE tunnels that provide immediate post-quantum encryption of network traffic. This upgrade protects against harvest-now-decrypt-later attacks and is implemented across five operating systems. The rollout employs temporary PQC downgrades, gradual rollout, and MDM overrides for robustness.