Building a certificate authority for the whole Internet
Summary
Cloudflare announces plans to become a public certificate authority, applying to major root programs and acquiring a trusted root from GlobalSign to broaden device reach. The post outlines ACME-first issuance, transparency in operations, renewal automation, and the goal of a resilient Web PKI that supports post-quantum certificates, including Merkle Tree Certificates (MTCs). It also notes that issuance will ramp up gradually, with public dashboards, audits, and collaboration with existing CAs to keep the Internet secure as TLS usage grows.