Amazon CloudFront now details the security protocols used by its viewers, revealing the key exchange, signature scheme and public key type for each connection. The service can also identify the internet service provider originating each request, allowing users to isolate network-specific traffic patterns. With these new capabilities, CloudFront enables measurement of post-quantum cryptography adoption, pinpointing clients that currently do not use it. This visibility is provided through two new optional headers forwarded to origins, offering granular control over traffic and security analysis.
CloudFront-Viewer-ISP Enables Network Performance Breakdown
CloudFront-Viewer-ISP allows granular traffic breakdown by internet service provider, enabling users to pinpoint the origin of requests and isolate anomalous activity stemming from a specific network. This capability extends beyond simple identification. The service facilitates performance analysis segmented by ISP, revealing potential bottlenecks or inconsistencies within particular provider networks. By identifying the source of each request, operators can proactively address issues impacting viewers connected through a given ISP.
To implement these features, users must add the desired header to an origin request policy and then attach that policy to their CloudFront distribution. Amazon states that this service can be used to measure the share of viewers that connect with PQC and identify clients that do not yet do so, highlighting its potential for enhancing security posture and preparing for the quantum computing era.
Source: https://aws.amazon.com/about-aws/whats-new/2026/10/cloudfront-viewer-isp-post-quantum-visbility/




See today’s quantum computing news on Quantum Zeitgeist for the latest breakthroughs in qubits, hardware, algorithms, and industry deals.
