Cloudflare announces intention to become a public certificate authority

Cloudflare announced on Tuesday, September 29, 2026, its intention to become a public certificate authority for digital certificates, moving from a network services provider to a major party in verifying website identities and encrypting their data. It plans to issue traditional certificates alongside quantum certificates based on Merkle Tree technology, scheduled for production launch in the first quarter of 2027. To ensure compatibility of its certificates with old devices lacking software updates, Cloudflare agreed to acquire trusted root key material from GlobalSign, expecting to complete the deal within two months under customary regulatory conditions. The start of traditional certificate issuance is tied to completing acceptance procedures in the root programs of Chrome, Apple, Microsoft, and Mozilla, applications still under review. The quantum certificates adopt a mechanism that reduces network burden by allowing browsers to verify certificate authenticity via lightweight proofs instead of transmitting large quantum signatures with each connection, based on a draft under development at the IETF. Matthew Prince, CEO and co-founder, indicated the step extends efforts to provide free encryption twelve years ago, describing securing the web against future quantum computing capabilities as one of the most prominent coordination challenges in internet history. The announcement remains a project in progress contingent on approvals and adoption of specifications.