CloudFront adds headers for viewer networks and post-quantum connections

Amazon says CloudFront can now forward optional headers that identify a viewer's internet service provider and describe the cryptography used on the viewer's connection. Website operators can use them to analyze traffic by network and measure use of post-quantum cryptography. The connection details include the key exchange, signature scheme and signature public key type. Operators enable either header by adding it to an origin request policy and attaching that policy to their distribution. The headers expose connection information; they do not themselves change the cryptography clients use.