Unlocking QUIC’s proxying potential with MASQUE
March 20, 2022 4:58 PM
We continue our technical deep dive into traditional TCP proxying over HTTP...
A Primer on Proxies
March 19, 2022 5:01 PM
A technical dive into traditional TCP proxying over HTTP...
Announcing experimental DDR in 1.1.1.1
March 08, 2022 8:55 PM
The majority of DNS queries on the Internet today are unencrypted. This post describes a new protocol, called Discovery of Designated Resolvers (DDR), that allows clients to upgrade from unencrypted DNS to encrypted DNS when only the IP address of a resolver is known. ...
The post-quantum future: challenges and opportunities
February 25, 2022 4:03 PM
The story and path of post-quantum cryptography is clear. But, what are the future challenges? In this blog post, we explore them...
Post-quantumify internal services: Logfwrdr, Tunnel, and gokeyless
February 25, 2022 4:03 PM
A big challenge is coming: to change all internal connections at Cloudflare to use post-quantum cryptography. Read how we are tackling this challenge!...
MORE POSTS
February 24, 2022 5:30 PM
Building Confidence in Cryptographic Protocols
This blogpost refers to the efforts to use formal/verification/implementation for post-quantum algorithms to achieve better assurance for them. It also touches on our Cloudflare efforts on this...
- By
February 24, 2022 4:23 PM
Using EasyCrypt and Jasmin for post-quantum verification
This blogpost will touch upon how to practically use Jasmin and EasyCrypt to achieve better security guarantees when verifying KEMs...
- By
February 23, 2022 1:59 PM
Making protocols post-quantum
Post-quantum key exchange and signature algorithms come with different trade-offs that we’re familiar. How do we handle that when updating protocols, is this an opportunity to revisit the status quo?...
- By
February 22, 2022 1:59 PM
Deep dive into a post-quantum key encapsulation algorithm
In this blog post, we will look at what Key Encapsulation Mechanisms are and why they matter in a post-quantum world...
- By
February 22, 2022 1:59 PM
Deep dive into a post-quantum signature scheme
How can one attest to an identity and prove it belongs to one self? And how can one do it in the face of quantum computers? In this blog post, we examine these questions and explain what post-quantum signatures are...
- By
February 21, 2022 1:59 PM
The post-quantum state: a taxonomy of challenges
At Cloudflare, we strive to help build a better Internet, which means a quantum-protected one. In this post, we look at the challenges for migrating to post-quantum cryptography and what lies ahead using a taxonomy...
- By
February 21, 2022 1:59 PM
The quantum solace and spectre
What is quantum computing and what advances have been made so far on this front? In this blog post, we will answer this question and see how to protect against quantum adversaries...
- By
November 08, 2021 3:39 PM
Sizing Up Post-Quantum Signatures
How much room does TLS have for the big post-quantum signatures? We had a look: it’s tight....
- By
October 18, 2021 1:46 PM
Tunnel: Cloudflare’s Newest Homeowner
Starting today, users who deploy and manage Cloudflare Tunnel at scale now have easier visibility into their Tunnel’s respective status, routes, uptime, connectors, cloudflared version, and much more through our new UI in the Cloudflare for Teams Dashboard. ...
- By
October 15, 2021 1:02 PM
“Look, Ma, no probes!” — Characterizing CDNs’ latencies with passive measurement
In this article we describe an alternative approach to active measurements, which accurately predicts network latencies using only passively collected data....
- By
October 15, 2021 1:01 PM
Multi-User IP Address Detection
We’ve devised novel methods to detect multi-user IP addresses, and today we’re excited to announce their integration into our global threat intelligence products. These will improve the quality of our detection techniques and reduce false positives for our customers, and the clie...
- By
October 15, 2021 1:00 PM
Geo Key Manager: Setting up a service for scale
Diagnosing scaling issues in a service associated with TLS termination through a deep dive into some of the incidents it caused....
- By
October 14, 2021 12:59 PM
Privacy-Preserving Compromised Credential Checking
Announcing a public demo and open-sourced implementation of a privacy-preserving compromised credential checking service...
- By
October 14, 2021 12:59 PM
Unbuckling the narrow waist of IP: Addressing Agility for Names and Web Services
IP addresses associated with names, interfaces, and sockets, can tie these things together in a way that IP was never designed to support. This post describes Cloudflare efforts to decouple of IP addresses from names, the latest in a quest for something we’re calling Addressing A...
- By