September 20, 2026•1 min read•from InfoQ

Cloudflare Measures Origin TLS Preferences, Cutting Handshake Retries from 52% to 3.7%

Cloudflare has replaced its static X25519 guess for origin TLS handshakes with per-origin measurement. HelloRetryRequests on scanned origins fell from roughly 52% to 3.7%, removing over 150 ms from p90 latency. Post-quantum connections completing in one round trip rose from 0% to 99.2%, though only 12.8% of origins support it.

By Steef-Jan Wiggers

Want to read more?

Check out the full article on the original site

View original article→

Tagged with

#Cloudflare

#TLS

#Origin

#Handshake

#X25519

#HelloRetryRequests

#Post-Quantum

#Latency

#p90 Latency

#Round Trip

#Connections

#Key Exchange

#Security

#Cryptography

#Origins

#Network Performance

#Measurement

#Automatic

#protocols

#network