Post-quantum Cryptography

Cloudflare aims to achieve full post-quantum security by 2029, shifting emphasis from encryption to authentication, and outlines concrete milestones while invoking regulatory coordination and standardization to accelerate industry-wide migration.

Quantum-threat timelines are tightening; 2029 is a plausible deployment deadline, so migrate to post-quantum cryptography now (favor ML-DSA-44 and ML-KEM) and drop non-PQ/hybrid approaches, with attention to WebPKI, TEEs, and standards/regulatory friction.

Google accelerates Q Day to 2029, forcing a rapid industry shift off RSA and EC cryptography.