Cloudflare plans to offer paying and free users hybrid certificates combining classic TLS with post-quantum Merkle Tree Certificates. By acquiring a trusted root from CA GlobalSign, it aims to let millions of websites enable them without added performance overhead.