Post-Quantum Encryption from AS215977

This chart shows the percentage of HTTPS requests using post-quantum key exchange over time. Cloudflare has enabled hybrid post-quantum key agreement on all domains served through its network, including this one. Adoption depends on both client (browser) and server support.

Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it.

Suleman Ahmad, Yawar Jamal, Alex Krivit