About
pqdoctor and Flarebox are made by Kalyan Gopalam.
They’re independent projects. Not affiliated with or endorsed by Cloudflare.
Both live in one repository, which is private for now. The pqdoctor CLI’s source is published on crates.io. The pqdoctor CLI is on the Downloads page. Flarebox’s installers are there too. MIT licensed.
Contact
Section titled “Contact”hi@kalyangopalam.com: access, questions, or to opt a domain out of scans.
Sources
Section titled “Sources”Our own numbers come from the study and the lab: Results and Accuracy. Every outside number comes from this list, with the date it was published.
| Claim | Figure | Source | Date |
|---|---|---|---|
| Origins Cloudflare connects to with PQ key exchange | 0.5% → 12.8% (2023 → Sep 2026) | Automatic Key Exchange for origins, Cloudflare | 2026-09-08 |
| The same, newer | “just about 15%” | Is your domain using post-quantum encryption?, Cloudflare | 2026-09-29 |
| PQ share of browser traffic to Cloudflare | about 70% | Is your domain using post-quantum encryption?, Cloudflare | 2026-09-29 |
| Top 1M sites with PQ key exchange, and without Cloudflare | 54%, and 22% with Cloudflare-hosted domains removed | 2026 State of PQC on the Web, F5 Labs | 2026-09-22 |
| Cloudflare’s timeline | Fully post-quantum by 2029, including authentication | Cloudflare targets 2029, Cloudflare | 2026-04-07 |
| ML-DSA authentication to origins | Shipped; ML-DSA-44 recommended | Post-quantum authentication to origins, Cloudflare | 2026-07-29 |
| ML-DSA codepoints in TLS 1.3 | mldsa44 0x0904, mldsa65 0x0905, mldsa87 0x0906 |
draft-ietf-tls-mldsa, IANA | 2026-09-11 |
| Workers TCP sockets limits | Cloudflare, localhost and private IPs blocked; port 25 blocked; ≤6 waiting connections; 50 / 10,000 subrequests | TCP sockets, limits | read 2026-10-13 |
F5’s 2025 edition (8.6%) used a different method, so the years don’t compare.
This site
Section titled “This site”Built with Astro and Starlight. No analytics, no cookies, no third-party scripts. Fonts from Google Fonts.