AUTOMATIC KEY EXCHANGE: FASTER, POST-QUANTUM SECURE ORIGIN HANDSHAKES FOR 45 BILLION DAILY CONNECTIONS (AND COUNTING)

Summary from the TLDR DevOps newsletter

Cloudflare's new Automatic Key Exchange feature probes origin servers to detect supported algorithms, allowing the system to lead with the correct key agreement on the first try. The rollout reduced HelloRetryRequests from roughly 52% to 3.7% and cut connection handshake latency by more than 150 ms at p90. This automation has upgraded hundreds of thousands of domains to post-quantum encryption without manual configuration.