Cloudflare plans to issue quantum-safe TLS certificates
摘要
Cloudflare宣布计划签发抗量子TLS证书，成为首批采用可抵御量子计算机攻击的加密技术的证书机构之一。该公司将使用开源平台，同时签发传统TLS证书和后量子证书（Merkle Tree Certificates），混合证书对付费和免费用户均免费。为构建该系统并推动其在TLS生态中普及，Cloudflare将收购GlobalSign的受信任证书根。此举将使
Cloudflare said Tuesday it plans to issue quantum-proof TLS certificates, making it one of the first authorities to issue such certificates that use a form of cryptography that is widely believed to withstand attacks from quantum computers.
The Internet infrastructure provider said it will use an open source platform that issues both classic TLS certificates and a post-quantum equivalent known as Merkle Tree Certificates. The hybrid certificates will be free to both paying and non-paying users. To help build the massive system and establish ubiquity across the sprawling TLS ecosystem, Cloudflare will be acquiring an already trusted certificate root from CA GlobalSign. Cloudflare said the move will let millions of websites use post-quantum certificates at the flip of a switch and without incurring any increased performance overhead.
Fundamental architectural changes ahead
Cloudflare’s plans are part of a major overhaul in the web public key infrastructure (WebPKI) required to make website encryption and authentication safe for the coming post-quantum age. A major challenge is using quantum-proof signatures that can be easily transmitted during web requests and recorded in transparency logs to ensure counterfeit certificates aren't assigned to websites. The makeover will take years to complete, because it requires the work of an untold number of engineers who design operating systems, browsers, certificate authorities, and Internet infrastructure.
转载信息
评论 (0)
暂无评论，来留下第一条评论吧