Summary
Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it.
Improvements and security content
- Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it.
Known issues
Publisher statement
Not stated. The verified publisher record does not contain a known-issues statement.
Affected products and versions
Fixed versions or updates
- No fixed version is stated in this record.
Recommended action
Review the official publisher document before deployment.
Official publisher evidence
CLOUDFLAREVERIFIED
Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)
Checked 26 Sep 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.
Open the official publisher source ↗