2024-11-08
We describe how Cloudflare uses a custom Lisp-like programming language and formal verifier (written in Racket and Rosette) to prevent logical contradictions in our authoritative DNS nameserver’s behavior....
Continue reading »
2024-11-07
NIST has standardized four post-quantum signature schemes so far, and they’re not done yet: there are fourteen new candidates in the running for standardization. In this blog post we take measure of them and discover why we ended up with so many PQ signatures....
2024-09-25
We are excited to announce the latest leap forward in speed – Speed Brain. Speed Brain uses the Speculation Rules API to prefetch content for the user's likely next navigations. The goal is to download a web page to the browser before a user navigates to it, allowing pages to load instantly. ...
2024-09-24
Cloudflare is now verifying WhatsApp’s Key Transparency audit proofs to ensure the security of end-to-end encrypted messaging conversations without having to manually check QR codes. We are publishing the results of the proof verification to https://dash.key-transparency.cloudflare.com for independent researchers and security experts to compare against WhatsApp’s. Cloudflare does not have access to underlying public key material or message metadata as part of this infrastructure....
2024-09-05
Cloudflare brings visibility to the practice of connection tampering as observed from our global network....
September 05, 2024 7:00 AM
New TCP resets and timeouts dataset on Cloudflare Radar surfaces connection tampering, scanning, DoS attacks, and more....
August 20, 2024 9:00 PM
NIST has published the first cryptographic standards for protecting against attacks from quantum computers. Learn what this means for you and your organization....
August 08, 2024 2:05 PM
This new Automatic SSL/TLS setting will maximize and simplify the encryption modes Cloudflare uses to communicate with origin servers by using the SSL/TLS Recommender....
March 05, 2024 2:00 PM
Today, nearly two percent of all TLS 1.3 connections established with Cloudflare are secured with post-quantum cryptography. What once was the topic of futuristic tech demos will soon be the new security baseline for the Internet...
January 04, 2024 4:07 PM
In this post, we explore the latest changes to Privacy Pass protocol. We are also excited to introduce a public implementation of the latest IETF draft of the Privacy Pass protocol — including a set of open-source templates that can be used to implement Privacy Pass Origins, Issu...
December 22, 2023 4:16 PM
Providing software and web services that deliver value for users often requires measuring user behavior. In this blog we discuss emerging cryptographic and statistical techniques that enable collecting such measurements without violating user privacy...
October 02, 2023 1:00 PM
Need a recap or refresher on all the big Birthday Week news this week? This recap has you covered...
September 29, 2023 1:05 PM
Cloudflare announces Post-Quantum Cryptography as a Generally Available system...
September 29, 2023 1:00 PM
We're excited to announce a contribution to improving privacy for everyone on the Internet. Encrypted Client Hello, a new standard that prevents networks from snooping on which websites a user is visiting, is now available on all Cloudflare plans. ...
September 29, 2023 1:00 PM
Starting today, you can secure the connection between Cloudflare and your origin server with post-quantum cryptography...
September 29, 2023 1:00 PM
Cloudflare is implementing DAP (Distributed Aggregation Protocol) – a way of aggregating data without exposing individual measurements that uses multi-party computation...
September 04, 2023 1:00 PM
In this blog we’re going to take a closer look at “connection coalescing”, with specific focus on manage it at a large scale...
March 16, 2023 1:00 PM
Cloudflare makes the most advanced cryptography free for everyone, and it’s in beta today...
March 16, 2023 1:00 PM
The recent news reports of AI cracking post-quantum cryptography are greatly exaggerated. In this blog, we take a deep dive into the world of side-channel attacks and how AI has been used for more than a decade already to aid it...
January 27, 2023 2:00 PM
Using the story of Geo Key Manager v2 as an example, let’s re-imagine access control for distributed systems using a variant of public-key cryptography, called attribute-based encryption....
