Fieldnotes Technical changes worth understanding, and what they cost. https://mahdirajaee.com/en/blog en 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it ML-DSA-44 validation for DNSSEC is enabled on 1.1.1.1 to test post-quantum signatures at scale. https://mahdirajaee.com/en/blog/cloudflare-ml-dsa-44-dnssec-validation https://mahdirajaee.com/en/blog/cloudflare-ml-dsa-44-dnssec-validation Fri, 11 Sep 2026 12:41:49 GMT 1.1.1.1 now validates post-quantum DNSSEC 1.1.1.1 enabled DNSSEC validation for ML-DSA-44 (IANA algorithm 18). https://mahdirajaee.com/en/blog/cloudflare-post-quantum-dnssec https://mahdirajaee.com/en/blog/cloudflare-post-quantum-dnssec Fri, 11 Sep 2026 09:00:00 GMT Swift deinit can now consume what it owns SE-0544: allow mutation and consumption of self in non-copyable type deinit. https://mahdirajaee.com/en/blog/swift-deinit-noncopyable https://mahdirajaee.com/en/blog/swift-deinit-noncopyable Thu, 10 Sep 2026 08:00:00 GMT Workers resolves modules by URL, not by path Module specifier resolution changed from filesystem-style paths to URL-based resolution. https://mahdirajaee.com/en/blog/workers-module-registry https://mahdirajaee.com/en/blog/workers-module-registry Tue, 08 Sep 2026 10:30:00 GMT A TDE fix that makes old ciphertext unreadable pg_vault_tde 1.7.1 corrects the AAD derivation for out-of-line TOAST values in AES-256-GCM. https://mahdirajaee.com/en/blog/pg-vault-tde-aad https://mahdirajaee.com/en/blog/pg-vault-tde-aad Fri, 28 Aug 2026 07:15:00 GMT