The plan

Cloudflare operates a large-scale TLS infrastructure serving a substantial share of web traffic. The company's stated roadmap involves moving to a public certificate authority model and preparing certificate issuance based on post-quantum cryptography — algorithms designed to resist attacks by quantum computers.

The 2027 timeline for post-quantum certificate issuance aligns with broader industry expectations that quantum-resistant standards will be in active deployment before quantum computers pose a practical threat to current public-key cryptography.

Context

Post-quantum certificate issuance matters because encrypted traffic recorded today could in principle be decrypted later by a sufficiently capable quantum computer. Certificate authorities and major infrastructure providers have been migrating toward new cryptographic standards as they are standardized and adopted.

Details on the specific technical or organizational structure of Cloudflare's public CA transition remain limited in the available information, and the company's announced schedule should be treated as a stated target rather than a completed deployment.

The claim's core elements — the switch to a public certificate authority and the 2027 target for post-quantum certificate issuance — are supported by the available evidence, making the overall assessment Mostly True.