Post-Quantum Authentication to Origins Is Now Supported
Cloudflare, Wednesday, July 29th, 2026
Cloudflare adds post-quantum authentication for Authenticated Origin Pulls and Custom Origin Trust Store.
Cloudflare now supports post-quantum authentication when connecting to customer origin servers, covering both Authenticated Origin Pulls and the Custom Origin Trust Store.
This is the first step toward providing post-quantum authentication across all Cloudflare products, extending work already done on post-quantum key agreement.
Authentication is the harder half of the migration because it requires coordinated certificate and trust store changes on both ends. The post explains what customers need to configure and what remains classical for now.
It matters for organizations with harvest-now-decrypt-later concerns on origin traffic.