← Wednesday, September 30, 2026SecurityRelease
Cloudflare adds beta protection against post-quantum IPsec downgrade attacks
Cloudflare says it worked with the IETF on an IPsec downgrade mitigation and made it available in beta across its IPsec products. Teams migrating network protocols to post-quantum cryptography should account for downgrade risks as well as new algorithms.
- What
- Cloudflare implemented a beta mitigation against downgrade attacks on IPsec across its IPsec products.
- How
- An on-path attacker can manipulate handshake messages to make endpoints use classical cryptography instead of post-quantum cryptography.
- Why it matters
- Downgrade protection matters because IPsec connects systems whose traffic could otherwise be exposed to quantum attacks.
Discussion
Discussion is not switched on yet. Use Note above to keep your own thoughts on this story.
Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.
