This just seems like Cloudflare testing something that the CAs will eventually be running themselves, as opposed to them trying to supplant the CAs or something.

Better off not using Cloudflare if you give a shit about the internet.

Shove it up your ass, Cloudflare.

No offense but CAs still don't support ed25519, a now 20 year old ECDSA standard that everyone uses basically everywhere else, including FIPS.

Although tbf I'm sure the NSA could yolo PKI in an "emergency" situation anyway by compromising a CA, though I don't think that would happen unless its literally WWIII.

Instead of just centralizing everything with Google, let's ALSO centralize all of that through Cloudflare too. If we centralize enough stuff onto enough different monolithic platforms it counts as decentralized, right? /s

Is this for quantum resistance? The certificates would be pretty large and they don't give a key agreement scheme, just signatures. They are clever but to deploy them on internet scale would take a lot of software changes in everything.