Technology / Privacy & Security
Microsoft adds hybrid post-quantum encryption to Azure Front Door
The update protects supported client connections, not yet the separate link to back-end services.
Status: source-checked.
Microsoft said Friday that Azure Front Door now supports hybrid post-quantum key establishment for incoming TLS 1.3 connections. The system combines classical elliptic-curve cryptography with the standardized ML-KEM method.
The feature is enabled by default, according to Microsoft. Connections use a hybrid group when the client supports it, with classical fallback available for compatibility.
The protection currently covers the connection between a client and Front Door’s edge, the company said. Extending it to the separate connections to Azure services remains a later engineering phase.
What we know / what we don't
What we know
- Microsoft said Friday that Azure Front Door now supports hybrid post-quantum key establishment for incoming TLS 1.3 connections. The system combines classical elliptic-curve cryptography with the standardized ML-KEM method.
- The feature is enabled by default, according to Microsoft. Connections use a hybrid group when the client supports it, with classical fallback available for compatibility.
- The protection currently covers the connection between a client and Front Door’s edge, the company said. Extending it to the separate connections to Azure services remains a later engineering phase.
What we don't know
- Deployment and performance statements are from Microsoft; no independent security assessment was reviewed.
The source record