Cloudflare to Launch Quantum-Safe Website Certificates in Early 2027

Cloudflare, a major internet security and performance company, announced plans to become a public certificate authority (CA). This means it will start issuing digital certificates that websites use to secure connections. What’s new is that Cloudflare will offer not only the usual certificates but also a new type designed to resist attacks from future quantum computers.

These new certificates, called Merkle Tree Certificates (MTCs), are built to handle the challenges quantum computers could bring. Quantum machines might one day break the encryption that currently protects internet traffic, so Cloudflare is preparing ahead. MTCs use clever cryptographic methods to keep certificate data small and efficient, avoiding the heavy data load that quantum-resistant signatures usually require.

Cloudflare aims to start issuing these quantum-safe certificates in the first quarter of 2027. To get there, it is acquiring trusted root certificate material from GlobalSign, a well-known certificate authority. This move helps Cloudflare’s certificates be recognised by most devices and browsers right from the start, including older ones.

However, Cloudflare still needs approval from major browser and device makers like Google Chrome, Apple, Microsoft, and Mozilla before it can officially issue certificates. These approval processes are underway but not yet complete.

The company also promises that managing both traditional and quantum-safe certificates will be simple and free. Website owners won’t have to switch suddenly or face extra costs as the internet shifts to stronger security.

Cloudflare’s work fits into a wider effort in the tech industry to update how websites prove their identity and encrypt connections for a future where quantum computers are common. The new certificates integrate transparency logs, helping detect fake certificates more efficiently.

While these plans are promising, the rollout depends on final approvals and technical readiness. It’s a complex upgrade that will take time, but it could keep the internet safer against next-generation cyber threats.