Cloudflare Measures Origin TLS Preferences, Cutting Handshake Retries from 52% to 3.7%

Billy Odell Tucker-Robinson Founder & Host — Banking With Billy Network • Intelligence Network • Data Science • AI Research • World News
Published: 2026-09-20T09:36:26.760Z • Permanent link

Cloudflare, the renowned cybersecurity firm, has made a significant breakthrough in its efforts to enhance the security of its services. The company has replaced its static X25519 guess for origin TLS handshakes with per-origin measurement, which has led to a substantial decrease in the number of failed handshake retries. According to the data, HelloRetryRequests on scanned origins have fallen from roughly 52% to 3.7%, resulting in a reduction of over 150 ms from p90 latency.

This development is a direct result of the tireless efforts of Cloudflare's team, led by the company's experts in cryptography and network security. The implementation of per-origin measurement is a significant improvement over the static X25519 guess, which was prone to errors and inefficiencies. By using per-origin measurement, Cloudflare can now more accurately determine the TLS handshake preferences for each origin, reducing the likelihood of failed handshakes and improving the overall performance of its services.

The impact of this change is not limited to Cloudflare alone, as it has significant implications for the broader cybersecurity landscape. As a leading provider of cloud-based services, Cloudflare plays a critical role in the security of online transactions, data storage, and communication. The reduction in failed handshake retries will have a direct impact on the performance and reliability of these services, making them more secure and efficient for users worldwide.

The reduction in failed handshake retries has significant implications for companies that rely on Cloudflare's services. For example, online payment processors, such as PayPal and Stripe, will benefit from the improved security and performance of Cloudflare's services. Similarly, e-commerce platforms, such as Shopify and WooCommerce, will see improved performance and reduced latency, leading to a better user experience for their customers.

The impact of this change will also be felt in the research community, where scientists and engineers are working to develop more secure and efficient cryptographic protocols. The implementation of per-origin measurement is a significant step forward in the development of post-quantum cryptography, which is essential for ensuring the security of online transactions and communication in the face of emerging quantum threats. By reducing the number of failed handshake retries, Cloudflare is helping to advance the state of the art in cryptographic research and development.

The implementation of per-origin measurement is not an isolated event, but rather part of a larger trend towards more secure and efficient cryptographic protocols. In recent years, there has been a growing recognition of the need for more secure and efficient cryptographic protocols, particularly in the face of emerging quantum threats. As a result, researchers and developers have been working to develop new cryptographic protocols and techniques that are resistant to quantum attacks.