Cloudflare AKE cuts origin HelloRetryRequests from 52% to 3.7%

Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting) Suleman Ahmad, Yawar Jamal, and Alex Krivit Every time Cloudflare opens a new TLS 1.3 connection to an origin server, we have to make a guess: the protocol requires us to commit to a key agreement algorithm in the very first packet we send, before the origin has told us anything...