Cloudflare's 1.1.1.1 now validates DNSSEC with NIST's post-quantum ML-DSA-44

jedisct1 · x · 2026-09-11

Cloudflare announced that its 1.1.1.1 public DNS resolver now validates DNSSEC signatures using NIST's post-quantum ML-DSA-44 algorithm, detailing how it handles the resulting 2,420-byte signatures at scale and mitigates downgrade risks.

Original post →

More from Infra

Infra channel →