Cloudflare AKE cuts origin HelloRetryRequests from 52% to 3.7%

Cloudflare has launched Automatic Key Exchange, which probes origin servers to determine their supported encryption algorithms rather than guessing, reducing HelloRetryRequests from 52% to 3.7% and cutting connection latency by over 150ms. The system automatically prioritizes post-quantum hybrid encryption (X25519MLKEM768) where possible, enabling hundreds of thousands of domains to have quantum-resistant connections without manual configuration—a critical step toward making the internet quantum-secure before potential cryptographic breakthroughs occur.