Cloudflare AKE cuts origin HelloRetryRequests from 52% to 3.7%

Cloudflare’s Automatic Key Exchange (AKE) materially improves both performance and security for origin connections by automatically selecting the best TLS key exchange, reducing HelloRetryRequests from 52% to 3.7% and cutting p90 handshake latency by more than 150 ms across 45 billion daily connections. For CIOs and technology leaders, the strategic takeaway is that post-quantum security can now be deployed at scale without manual tuning, lowering operational burden while accelerating resilience against harvest-now, decrypt-later threats. IT organizations should view this as a model for automating cryptographic modernization, reducing compatibility risk, and improving user-facing speed at the same time.