Cloudflare to become a public certificate authority with post-quantum certificates

Cloudflare announced plans to become a public certificate authority issuing post-quantum Merkle Tree Certificates alongside conventional ones. The format addresses signature size: post-quantum signatures run 2,420 bytes versus 64 bytes for elliptic curve schemes. Production issuance is scheduled for the first quarter of 2027.

• Cloudflare will issue conventional and post-quantum certificates from one system
• Post-quantum signatures are 2,420 bytes versus 64 bytes for ECC
• Merkle Tree Certificates are an IETF draft co-authored by Cloudflare
• Production issuance of Merkle Tree Certificates set for Q1 2027