Post-quantum encryption for Cloudflare IPsec is generally available
2026-05-05T07:24:12Z•8411ff9eb9685a3218b7d43316eca146ee454b0a6c94aea4433dfe18a330023f
IPsecMCPML‑KEMPQacmeai securityaspacertificate validationclient‑side securitycloudflaredohs/ddoshybrid KEMkt logslog explorermanaged oauthmatrix homeserverpingorapost-quantumradarrequest smugglingresource‑scoped permissionsscannable api tokensvulnerability scanner
What happened
Collection of Cloudflare security blog posts (late 2025–Apr 2026) covering: general availability of post‑quantum IPsec (hybrid ML‑KEM) and a broader PQ roadmap targeting full PQ by 2029; proof‑of‑concept post‑quantum Matrix homeserver and Radar PQ telemetry; disclosure and fixes for request‑smuggling issues in Pingora OSS (fixed in Pingora 0.8.0) and a separate ACME certificate‑validation logic vulnerability with mitigations; large DDoS trends (record 31.4 Tbps event); new/GA security products and controls including Client‑Side Security, AI Security for Apps, Managed OAuth for Access (RFC 9728
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- 8411ff9eb9685a3218b7d43316eca146ee454b0a6c94aea4433dfe18a330023f
- Enrichment time
- 2026-05-05T07:24:12Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.