Research

December 26, 2024 2:00 PM

If you want to know what cache revalidation is, how it works, and why it can involve rolling a die, read on. This blog post presents a lock-free probabilistic approach to cache revalidation, along ...

By 
• Thibault Meunier

November 08, 2024 2:00 PM

We describe how Cloudflare uses a custom Lisp-like programming language and formal verifier (written in Racket and Rosette) to prevent logical contradictions in our authoritative DNS nameserver’s behavior....

By 
• James Larisch
• , Suleman Ahmad
• , Marwan Fayed

November 07, 2024 2:00 PM

NIST has standardized four post-quantum signature schemes so far, and they’re not done yet: there are fourteen new candidates in the running for standardization....

By 
• Bas Westerbaan
• , Luke Valenta

September 25, 2024 1:00 PM

We are excited to announce the latest leap forward in speed – Speed Brain. Speed Brain uses the Speculation Rules API to prefetch content for the user's likely next navigations. The goal is to download a web page to the browser before a user navigates to it, allowing pages to loa...

By 
• Alex Krivit
• , Suleman Ahmad
• , William Woodhead

September 24, 2024 1:00 PM

Cloudflare is now verifying WhatsApp’s Key Transparency audit proofs to ensure the security of end-to-end encrypted messaging conversations without having to manually check QR codes. We are publishing the results of the proof verification to https://dash.key-transparency.cloudfla...

By 
• Thibault Meunier
• , Mari Galicer

September 05, 2024 7:00 AM

Cloudflare brings visibility to the practice of connection tampering as observed from our global network....

By 
• Ram Sundara Raman
• , Luke Valenta
• , Marwan Fayed

September 05, 2024 7:00 AM

New TCP resets and timeouts dataset on Cloudflare Radar surfaces connection tampering, scanning, DoS attacks, and more....

By 
• Luke Valenta

August 20, 2024 9:00 PM

NIST has published the first cryptographic standards for protecting against attacks from quantum computers. Learn what this means for you and your organization....

By 
• Luke Valenta
• , Vânia Gonçalves
• , Bas Westerbaan

August 08, 2024 2:05 PM

This new Automatic SSL/TLS setting will maximize and simplify the encryption modes Cloudflare uses to communicate with origin servers by using the SSL/TLS Recommender....

By 
• Alex Krivit
• , Suleman Ahmad
• , J Evans
• , Yawar Jamal

March 08, 2024 2:00 PM

This blog post will cover the new sources of “chaos” that have been added to LavaRand and how you can make use of that harnessed chaos in your next application...

By 
• Cefan Daniel Rubin
• , Luke Valenta
• , Thibault Meunier

March 05, 2024 2:00 PM

Today, nearly two percent of all TLS 1.3 connections established with Cloudflare are secured with post-quantum cryptography. What once was the topic of futuristic tech demos will soon be the new security baseline for the Internet...

By 
• Bas Westerbaan

January 04, 2024 4:07 PM

In this post, we explore the latest changes to Privacy Pass protocol. We are also excited to introduce a public implementation of the latest IETF draft of the Privacy Pass protocol — including a set of open-source templates that can be used to implement Privacy Pass Origins, Issu...

By 
• Thibault Meunier
• , Cefan Daniel Rubin
• , Armando Faz-Hernández

December 22, 2023 4:16 PM

Providing software and web services that deliver value for users often requires measuring user behavior. In this blog we discuss emerging cryptographic and statistical techniques that enable collecting such measurements without violating user privacy...

By 
• Pierre Tholoniat

October 02, 2023 1:00 PM

Need a recap or refresher on all the big Birthday Week news this week? This recap has you covered...

By 
• Dina Kozlov
• , Mia Wang

September 29, 2023 1:05 PM

Cloudflare announces Post-Quantum Cryptography as a Generally Available system...

By 
• Wesley Evans
• , Bas Westerbaan
• , Christopher Patton
• , Peter Wu
• , Vânia Gonçalves