What happened
Cloudflare announced a closed beta of its PQ GeoKey Manager. It ties protected-key use to a selected region, with general availability planned for the first quarter of 2027.
- The design combines ML-KEM-768 and X25519.
- Integrating this new version with CDN certificate handling is a separate planned step.
- Source
- Cloudflare
- Source publication
- 23.10.2026
- Category
- Technology
- Material type
- Source announcement
A key-use boundary is not the location of an entire service
Controlling where a key is used does not describe every application data flow. Before adoption, identify the covered components, how access is restored after a restart and what happens when a region is unavailable. A closed-beta announcement does not establish availability to every account or automatically change an existing configuration.
What to check
- Check whether this is available, experimental or only announced.
- Verify requirements and compatibility with the versions you use.
- Run a small test in a separate project and record the result first.
Scope of this brief
This brief refers to the identified source material; it does not independently verify every reported circumstance. In community reports, distinguish the author’s claims from vendor findings. Timeline dates are not changed simply because the scanner runs again.
Sources and documentation
Source links are retained for checking dates, availability and original context.