Building a certificate authority for the whole Internet

Cloudflare has announced plans to become a publicly trusted certificate authority, applying to the root programs operated by Chrome, Apple, Microsoft, and Mozilla while acquiring an established GlobalSign root certificate to provide broad compatibility, including for older devices. The company aims to offer free, automated, ACME-based certificate issuance as an additional source of capacity and redundancy alongside existing providers such as Let’s Encrypt, responding to growing certificate demand and risks associated with dependence on a small number of CAs. Cloudflare says its CA will require automated renewal support through ACME Renewal Information, use mechanisms intended to limit the impact of revocation or compliance incidents, and provide operational transparency through reproducible software builds, hardware attestations, and public health reporting. It also plans to issue post-quantum Merkle Tree Certificates in production beginning in early 2027, supporting both conventional and post-quantum certificate formats during a gradual industry transition, while first testing its new CA infrastructure across Cloudflare’s own operations.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.