What happened
Cloudflare has extended post-quantum cryptography to the connection between its edge network and customer origin servers, with support now live for Authenticated Origin Pulls and the Custom Origin Trust Store. The company describes this as the opening move in a broader rollout of post-quantum authentication across its entire product portfolio. Separately, Amazon Web Services announced that all Amazon EKS Provisioned Control Plane clusters now benefit from a dramatically faster Horizontal Pod Autoscaler, with HPA sync concurrency raised to as much as 40 times the Kubernetes default, meaning workloads can respond to demand spikes significantly faster than before.
Why it matters for your business
For security-conscious teams, Cloudflare's move means that traffic flowing from the Cloudflare edge all the way to origin infrastructure can now be protected against cryptographically relevant quantum computers — a threat that, while not yet realized, is driving regulatory and compliance timelines across financial services, healthcare, and defense sectors. Organizations using Authenticated Origin Pulls should audit their current configurations to understand readiness for PQ enablement. On the Kubernetes side, the EKS autoscaling improvement directly reduces the window during which under-provisioned pods can degrade user experience or fail under load — a practical win for any team running variable or bursty workloads in production. No application code changes are required to benefit from the EKS update, making this one of the rarer infrastructure improvements that delivers value with zero migration effort.
What to watch next
Cloudflare has signaled that post-quantum authentication will extend to additional products over time, so engineering teams should monitor the roadmap and begin planning for PQ certificate management before it becomes a compliance requirement rather than a choice. On the AWS side, organizations running self-managed Kubernetes clusters outside of EKS Provisioned Control Plane should evaluate whether equivalent HPA tuning is feasible in their environments, as the performance gap between managed and self-managed control planes continues to widen.