Amazon CloudFront Adds Viewer ISP and Post-Quantum TLS Cryptography Details to Origin Requests

CloudFront enhances origin request headers with viewer ISP information and detailed TLS connection data, including post-quantum cryptography usage indicators.

By Marcus Lane · Editorial pseudonym · 2026-10-30 · 1 min read

AI-ASSISTED REPORTING · RETROSPECTIVE ARCHIVE

Retrospective edition: 2026-10-30. Source published: 2026-10-30. Added to this archive: 2026-11-03. This briefing was prepared later from the linked announcement; it was not published on this website on the historical edition date.

The newly added CloudFront-Viewer-ISP header provides the name of the viewer's internet service provider, enabling granular traffic and performance analysis by network source and aiding isolation of anomalous ISP traffic.

The CloudFront-Viewer-TLS-Details header reveals cryptographic parameters used on each viewer's TLS connection, including key exchange and signature algorithms, facilitating measurement of post-quantum cryptography adoption among clients. These headers can be forwarded to origins via configurable request policies.

Source & further reading

Amazon CloudFront now provides viewer ISP and post-quantum TLS details ↗

Source published 2026-10-30. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.