TechCapsules

AI-summarised brief · reviewed before publication

Cloudflare has introduced a closed‑beta Post‑Quantum GeoKey Manager as part of its Data Localization Suite, enabling enterprises to enforce strict geographic boundaries on private TLS and transport decryption keys across its global anycast network. The system uses a hybrid HPKE architecture that pairs lattice‑based ML‑KEM‑768 with classical X25519, ensuring session confidentiality even if one primitive is compromised. The beta targets Cloudflare One Zero Trust customers, with full CDN integration slated for Q1 2027, and addresses “Harvest Now, Decrypt Later” threats while meeting GDPR and regional data‑sovereignty requirements.