Radar Tools for Security Transparency

🔑 Enhanced Key Takeaways

• •Cloudflare Radar's origin post-quantum support graph shows the share of customer origins supporting X25519MLKEM768 hybrid key exchange, with data accessible via Radar API.[1]
• •The Key Transparency dashboard on Radar displays real-time verification status of KT logs for services like WhatsApp, indicating last signed and verified times by Cloudflare's Auditor.[1]
• •ASPA monitoring on Radar tracks adoption trends across five Regional Internet Registries (RIRs) and displays AS-level ASPA records and changes over time.[6]
• •Cloudflare secures 52% of all human web traffic with post-quantum encryption, as reported in their sixth annual Year in Review using Radar data.[4]

🛠️ Technical Deep Dive

• •Post-quantum monitoring extends to origin-facing connections using X25519MLKEM768, a hybrid of classical X25519 and NIST-standardized ML-KEM lattice-based scheme.[1]
• •Key Transparency logs enable public verification of end-to-end encrypted messaging, with Radar dashboard showing real-time Auditor signatures.[1]
• •ASPA (Autonomous System Provider Authorization) cryptographically validates BGP routing paths to prevent route leaks, monitored at RIR and AS levels.[6]
• •Cloudflare IPsec supports post-quantum hybrid ML-KEM per IETF draft extending RFC 9370 for IKEv2, enabling parallel key exchange with classical Diffie-Hellman.[5]

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline