Cloudflare has significantly reduced origin HelloRetryRequests from 52% to 3.7% through its new Automatic Key Exchange feature. The system probes TLS 1.3 origins to identify supported key agreement algorithms before establishing a connection. This allows Cloudflare to proactively lead with the most secure options, prioritizing post-quantum cryptography wherever supported.