Back
Post-quantum certificates also change the shape of trust
TechCloudflareCryptographyTLS

Post-quantum certificates also change the shape of trust

Novoid

Grouping the cryptographic proof

On 29 September 2026, Cloudflare described its post-quantum certificate-authority project. Merkle Tree Certificates group certificates into a signed tree; Chrome integration was targeted for early 2027.

Proof size becomes a systems concern

A certificate helps clients verify the identity of a server. Changing cryptographic algorithms can affect message sizes and the work required to establish trust. The transition therefore involves browsers, servers, logs and monitoring tools together.

For an infrastructure team, the practical lesson is to inventory that chain: who issues, renews, validates and raises alerts? Such an inventory helps before choosing a new certificate family because it makes dependencies and responsibilities visible.

An announced path still needs follow-up

This publication does not establish general browser adoption. Standardization, trust programmes and actual issuer availability need monitoring. A migration should only be qualified after testing with real clients, including older versions and intermediate network equipment.

Official source.

Editorial retrospective: event dates are stated in the text.