Cloudflare becomes a certificate authority with post-quantum support; PanelAlpha releases Engine 2.0 open source
My Take
What happened Cloudflare announced it is applying to become a certificate authority, combining an established root with ACME-first infrastructure and Merkle Tree Certificates designed for post-quantum cryptography.
Why it matters to hosts If approved, this changes who you can source TLS certificates from and may eventually offer hosting providers an alternative to Let's Encrypt or commercial CAs—particularly one built for quantum-resistant signatures that the industry will need within the decade.
What to do Review your current SSL certificate renewal workflows and providers now; understand what post-quantum readiness means for your stack so you can plan migrations before 2029-2030 when quantum threats become real.
My view I think Cloudflare's move here is strategic and grounded in real infrastructure thinking, not hype. They're not claiming to replace Let's Encrypt tomorrow—they're building with Merkle Tree Certificates to solve a genuine problem (post-quantum signature bloat in certificate logs) that nobody else is addressing head-on. For hosts, this is validation that post-quantum certificates matter now, not someday.
How are you currently planning for post-quantum TLS readiness in your hosting platform, or have you not yet prioritized it?
Key Themes
Notable Players
Launched eight observability platform updates, announced bid to become a certificate authority with post-quantum Merkle Tree Certificates, released Workers KV Instant with sub-2ms latency, unveiled K2 serverless event streams, expanded Registrar search with Workers and WebSockets, and declared EmDash 1.0 stable as an open-source CMS.
Released Engine 2.0 as open source under Apache 2.0 license, removed WordPress-only limitation to support arbitrary VPS hosting workloads.
Added 600,000 customers in one year, reaching 3.3 million total customers with €866 million annual recurring revenue.
Added 300 registrars to its portfolio, now holding 45% of all ICANN accreditations.
Acquired World Labs (generative AI world model developer) for $8.2 billion; CEO Fei-Fei Li joins as executive vice president and chief scientist.
Top Stories
Cloudflare is applying to become a certificate authority with an ACME-first approach and Merkle Tree Certificates. Hosting providers need to understand post-quantum TLS readiness now, not later.
Upmind, the SaaS billing and provisioning platform for hosting businesses, has rebuilt Tempo from the ground up. Hosts relying on Upmind for customer management should review the changes and feature parity.
WordPress 7.1.2 fixed a security flaw that was under active exploitation within hours of release. Hosts must patch WordPress installations immediately and monitor for post-patch attack activity.
PanelAlpha released Engine 2.0 as open-source Apache 2.0 software, no longer limited to WordPress. Hosting providers can now use Engine for arbitrary VPS workloads without vendor lock-in.
A federal judge denied Automattic's motion to dismiss WP Engine's antitrust claims and ruled Automattic does not own the WordPress trademark as it claimed. This revives the lawsuit and validates WP Engine's core grievances.
Security & Compliance
Cloudflare launched Account Abuse Protection dashboard using stateful analysis and edge-generated Hashed User IDs to detect AI-driven credential abuse. Hosting providers can integrate this for customer account protection.
Merkle Tree Certificates solve post-quantum signature bloat in certificate transparency logs. Hosts should begin planning TLS certificate infrastructure for quantum-resistant algorithms now.
Cloud & Infrastructure
Cloudflare unified logs, traces, analytics, alerts, dashboards, and telemetry export into a single observability platform with simpler pricing. Hosting providers using Cloudflare Workers can now consolidate monitoring tooling.
Workers KV Instant delivers sub-2ms p99 latency and 250ms global replication across 300+ edge locations. Hosts building edge-first applications can now eliminate cold-read penalties in key-value stores.
K2 is a serverless event streaming service on top of R2 object storage for high-scale data movement and retention. Hosting providers can decouple data producers and consumers at the edge without managing Kafka infrastructure.
CoreWeave is evolving from specialized GPU infrastructure to a full-stack AI cloud platform. Hosts competing in AI workloads must assess CoreWeave's platform features and pricing against their own offerings.
Pricing & Business
Cloudflare expanded Logpush, multi-account governance, and higher platform limits to all accounts, following its pledge to eliminate two-tier product access. Hosts using Cloudflare services will see more enterprise features available at lower tiers.
team.blue reported €866M ARR, 3.3M customers, and 600K net-new customers in one year. Independent hosts should evaluate competitive positioning against Europe's largest hosting consolidator.
Control Panels
Cloudflare released EmDash 1.0, a free open-source CMS built on Astro with sandboxed plugins that cannot access the database. Hosts can offer EmDash as a lightweight WordPress alternative for customers seeking simpler architecture.
Acquisitions & Market
AMD acquired World Labs for $8.2B to advance AI models and robotics; Fei-Fei Li becomes executive vice president and chief scientist. Hosts offering GPU-based AI services should monitor AMD's emerging AI platform roadmap.
WP Engine's antitrust claims against Automattic survived dismissal motions while Automattic won seven other victories. Hosting providers should monitor this case for implications on trademark control and platform access.
Domains & DNS
Cloudflare Registrar's new search spans 420+ TLDs using Workers and Durable Objects, with expanded API and cf CLI for agents. Registrar platforms must match Cloudflare's transparency and API capabilities to compete.
DropCatch now controls 45% of ICANN accreditations after adding 300 registrars. Market consolidation in domain registrars raises questions about vendor independence and renewal pricing leverage.
ICANN issued a breach notice to Netpia.com (IANA ID 130) with a three-week cure period for a fee-file violation opened in 2021. Registrars must ensure compliance files are filed timely or face accreditation loss.
Technology & Tools
Ubuntu 24.04 users are being prompted to upgrade to 26.04.1 (Resolute Raccoon). Hosting providers running Ubuntu servers should plan upgrade strategies and test compatibility before forced transitions.
Other News
AI infrastructure success requires evaluation of power, cooling, security, cost strategy, and scalability. Hosting providers should use this framework to audit gaps in their own AI readiness.
Grid connection regulatory approval is delaying Oracle's Wisconsin AI facility and risking planned 2027 customer delivery. Hosts planning AI infrastructure expansions should factor in utility interconnection lead times and regulatory delays.
N+1 cooling redundancy can mask shared-control dependencies, turning multiple units into a single failure domain. Hosting providers should design for degraded operation and commission actual resilience, not just rated capacity.
Digital Realty's first turnkey cable landing station brings subsea international capacity directly into an established data center. Hosts requiring direct subsea interconnection should evaluate Digital Realty's new offering.
AI workloads are pushing rack densities and power requirements beyond current grid capacity; utilities and hyperscalers are rethinking power delivery at massive scale. Hosting providers must plan for sustained power inflation and competition for scarce capacity.
AI infrastructure requires systems-level design integrating power, cooling, and compute for efficiency, resilience, and adaptability. Hosts building AI platforms should adopt holistic design discipline instead of siloed capacity planning.
Russia's defense ministry claimed responsibility for striking 14 Ukrainian data centers in 12 days, citing intelligence transmission. Hosting providers in conflict zones should review continuity, backup routing, and customer notification protocols. --- #HostSecure