Workers added opt-in support for ML-KEM and ML-DSA in Web Crypto. Our live lab generates ephemeral keys, verifies a signature and checks a shared secret entirely inside a Worker. No keys are returned to the visitor.
The limits of the demo matter
That demonstration does not tell you whether a visitor negotiated a post-quantum TLS connection. Cloudflare’s separate post-quantum visibility launch adds key-exchange data to HTTP Analytics, Log Explorer and Logpush. TLS 1.3 alone is not evidence of a hybrid ML-KEM handshake.