Security Architect: 2026-09-30

1. Building a certificate authority for the whole Internet

   Cloudflare, 2026-09-29. Read, 10 min.

   Cloudflare announced its intent to become a public certificate authority, saying it has applied to the Chrome, Apple, Microsoft, and Mozilla root programs and signed an agreement to acquire an established root from GlobalSign, though it is not issuing certificates yet. It plans to issue production Merkle Tree Certificates for post-quantum authentication, with the first certificates in the first quarter of 2027.

   Why it matters for this role: Confirm every ACME client in the estate supports ARI before counting Cloudflare as a second certificate source in a design.

Security Architect