1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it

Cloudflare Version 1 original current

Imported from official source

1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.

This version

Version
1 of 1
Recorded
September 18, 2026 11:34
Change
Initial
Content hash
0e1a837d7beea714d5bae691d96aece6
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.