Why we cannot wait for better post-quantum signature algorithms
2026-07-13T07:24:08Z•87f036ee78f07b1728f912561814d36fec8fc04592d963b47d019eac3ad9d233
API tokensCloudforce OneCopy FailIPsecLinux kernelML‑DSAManaged OAuthOAuthPQCPingoraWAFhybrid KEMleast‑privilegemitigation architecture','Project Glasswing'non‑human identitiesopen sourcepatchingpost‑quantumprivilege escalationquantum roadmaprequest smugglingself‑managed OAuththreat intelligencevulnerability discoveryvulnerability triage
What happened
Collection of Cloudflare security blog posts (Mar–Jul 2026) covering: post‑quantum crypto strategy and deployments (advocacy for ML‑DSA, hybrid ML‑KEM IPsec, 2029 PQ timeline, commentary on US PQ executive order); identity and OAuth improvements (Self‑Managed OAuth zero‑downtime migration, Managed OAuth for Access, scannable API tokens, resource‑scoped permissions, non‑human identity controls); product releases and hardening (AI Security for Apps GA, Client‑Side Security public rollout, realtime WAF rules via Cloudforce One intel, Log Explorer multi‑dataset support); vulnerability research and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- 87f036ee78f07b1728f912561814d36fec8fc04592d963b47d019eac3ad9d233
- Enrichment time
- 2026-07-13T07:24:08Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.