AI Weekly Malaysia

Cloudflare announced it is becoming a certificate authority, and says that CA will support Merkle Tree Certificates (MTCs), targeting early 2027 for inclusion in Chrome's newly launched Quantum-resistant Root Store, with standard MTC issuance offered at no cost. The post frames MTCs as the industry's agreed path forward after an experimental deployment with Chrome, arguing that simply swapping post-quantum cryptography into certificates at Internet scale would cause unacceptable performance degradation. Cloudflare also positions the MTC design as making certificate transparency a first-party property rather than an add-on, alongside a stated industry goal of upgrading to post-quantum cryptography by 2029. The published excerpt cuts off during the background section on today's trust ecosystem, so the detailed MTC mechanics are not in the provided text.

Why: If you terminate TLS through Cloudflare, the concrete change to track is that MTC issuance is promised free and its CA is targeting Chrome's Quantum-resistant Root Store in early 2027 — that is a browser-trust change, not just a Cloudflare feature. For everyone else, the 2029 post-quantum deadline in this post is the thing to plan against: MTCs exist because putting PQ signatures directly into certificates degrades performance at scale, so the decision to make is which part of your stack (load balancer, CDN, ingress, client libraries) will need MTC support versus classical certificate issuance, and when. The post contains no Malaysia- or Southeast Asia-specific detail; any local impact would come only from how widely regional builders use Cloudflare as their TLS terminator, which this text does not establish.