Cloudflare Email Security 为 MX 收发信启用后量子混合密钥交换
Email security - Post-quantum key exchange for MX deployments
Cloudflare Email Security now supports post-quantum hybrid key exchange with X25519MLKEM768 on the SMTP connections we make to receive and deliver mail. Deploying Email Security in front of a provider that supports post-quantum hybrid key agreement (like Google Workspace) will create a TLS 1.3 connection using post-quantum key agreement.
Cloudflare 邮件安全现在支持在接收和发送邮件的SMTP连接上使用X25519MLKEM768后量子混合密钥交换。在支持后量子混合密钥协商的提供商（如Google Workspace）前部署邮件安全，将使用后量子密钥协商创建TLS 1.3连接。
Inbound MX connections and outbound delivery connections now negotiate the X25519MLKEM768 hybrid key agreement when the peer supports it, protecting SMTP traffic against harvest-now, decrypt-later ↗ attacks.
当对等方支持时，入站MX连接和出站投递连接现在协商X25519MLKEM768混合密钥协商，保护SMTP流量免受“先收集，后解密”↗攻击。
Support is backwards compatible and enabled automatically for all customers. Senders and receivers that do not yet advertise post-quantum key agreement continue to connect with classical key exchange.
该支持向后兼容，并自动为所有客户启用。尚未宣传后量子密钥协商的发送方和接收方将继续使用经典密钥交换进行连接。
This applies to all Email Security packages:
这适用于所有邮件安全套餐：
- Advantage
- Enterprise
- Enterprise + PhishGuard
- Advantage
- Enterprise
- Enterprise + PhishGuard
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力