Cloudflare is becoming a public Certificate Authority to issue quantum-safe TLS certificates, using Merkle Tree Certificates to prevent future decryption.

The digital foundation of trust that secures nearly every interaction on the internet is facing an existential threat. For decades, Transport Layer Security (TLS) certificates have ensured that when a user visits a website, the connection is encrypted and the identity of the server is verified. However, the looming arrival of cryptographically relevant quantum computers threatens to render these current encryption standards obsolete. In response, Cloudflare has announced its intention to become a public Certificate Authority (CA), creating a pathway for the global web to transition toward quantum-safe security.

The quantum threat to current encryption

Most of the internet's current security infrastructure was designed long before quantum computing moved from theoretical physics to practical engineering. Today's encryption relies on mathematical problems that are nearly impossible for classical computers to solve but could be trivial for a sufficiently powerful quantum machine. If a quantum computer can break the underlying cryptography of TLS certificates, the privacy of global data transmissions would vanish, allowing attackers to decrypt sensitive communications retrospectively or impersonate secure websites.

Cloudflare identifies this as one of the most significant coordination challenges in the history of the internet. The risk is not just future-dated; the concept of harvest-now-decrypt-later means that encrypted data stolen today could be decrypted once quantum hardware matures. By establishing its own CA, Cloudflare aims to provide a safety net that allows the web to upgrade its defenses before the threat becomes a reality.

Hybrid security via Merkle Tree Certificates

To bridge the gap between the current era and the post-quantum future, Cloudflare is introducing a hybrid approach. The new CA will not simply replace old certificates but will issue both traditional TLS certificates and a next-generation equivalent known as Merkle Tree Certificates (MTCs). This dual-issuance strategy ensures that the internet does not break during the transition.

MTCs use a form of cryptography specifically designed to withstand attacks from quantum computers. By offering these as part of an open-source platform, Cloudflare is attempting to democratize access to high-level security. According to the company, these hybrid certificates will be available for free to both paying and non-paying users, removing the financial barrier to adopting quantum-safe standards. This move mirrors Cloudflare's effort twelve years ago when it made basic encryption free and automatic for millions of websites.

Solving the trust problem with GlobalSign

A Certificate Authority is only useful if browsers and operating systems trust it. Normally, a new CA must spend years building a reputation and applying to the root programs of major tech giants like Apple, Google, Microsoft, and Mozilla. To bypass this slow climb and achieve immediate ubiquity, Cloudflare has agreed to acquire established, publicly trusted Root CA key material from Cloudflare's partner, GlobalSign.

This acquisition is a strategic masterstroke for deployment speed. By utilizing an existing root, websites that switch to Cloudflare-issued certificates will be recognized as secure immediately, even on legacy hardware, older smartphones, and operating systems that no longer receive software updates. While Cloudflare has still applied to join the official root programs of the major browser vendors, the GlobalSign acquisition provides an immediate bridge to global trust.

Timeline for the post-quantum rollout

The transition to a quantum-safe web will happen in stages. Cloudflare expects the issuance of classical certificates to begin once the browser root program processes are finalized. However, the more critical milestone is the production of Merkle Tree Certificates. The company has scheduled the production issuance of MTCs for Q1 2027.

This rollout follows successful experiments conducted with Chrome, proving that post-quantum certificates can be implemented without incurring significant performance overhead. For the end-user and the business owner, the transition is designed to be seamless; the goal is to allow millions of websites to move to post-quantum security at the flip of a switch without requiring a complete rebuild of their existing infrastructure.

Reducing systemic risk in the PKI ecosystem

Beyond the quantum threat, Cloudflare's entry into the CA market addresses a structural weakness in the Public Key Infrastructure (PKI). Currently, trust is concentrated among a small number of dominant issuers. This centralization creates a systemic risk: if one of the few major CAs is compromised or suffers a catastrophic failure, a significant portion of the web's security could collapse.

Upgrading the web’s security before quantum computers can break it is one of the biggest coordination challenges in the history of the Internet.

By building an open, transparent, and reliable CA, Cloudflare intends to diversify the trust landscape. This decentralization makes the overall ecosystem more resilient, ensuring that the failure of a single entity does not jeopardize the security of the entire global network.

Strategic implications for global enterprises

For businesses operating in the USA, UK, and other global markets, this development signals a shift in how digital risk must be managed. While the immediate threat of a quantum computer is not yet present in the commercial sector, the regulatory and compliance landscape is shifting. In the US, government agencies have already begun discussing the transition to post-quantum cryptography to protect national security data.

Enterprises in the UK and global markets should view the arrival of MTCs as a critical component of their long-term cybersecurity roadmap. The ability to implement quantum-safe certificates without performance degradation means that companies can now begin planning for a post-quantum environment without sacrificing user experience. For those in highly regulated sectors such as finance or healthcare, adopting these standards early will likely become a benchmark for data compliance and fiduciary responsibility as the industry moves toward 2027.

The move by Cloudflare essentially shifts the burden of quantum readiness from the individual business owner to the infrastructure provider. By integrating this into the connectivity cloud, the technical complexity of quantum-safe migration is abstracted away, allowing entrepreneurs to focus on growth while their underlying security evolves automatically.

FAQ

---

Sources: Arstechnica, Cloudflare, Thequantuminsider ·