Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)
Automatic Key Exchange probes TLS 1.3-capable customer origins to determine supported key agreement algorithms, then connects using the most secure option available, prioritizing post-quantum methods whenever supported.
MAIN POINTS
- Probes TLS 1.3-capable origins to identify supported key agreement algorithms.
- Selects the strongest available algorithm when establishing origin connections.
- Prefers post-quantum connections whenever the origin supports them.
- Uses discovered capabilities to optimize secure connection negotiation.
TAKEAWAYS
- Capability probing enables smarter, security-focused connection choices.
- TLS 1.3 support is the basis for discovering origin key exchange options.
- Post-quantum algorithms are favored when compatible with the origin.
- Automatic selection reduces manual tuning while improving connection security.