1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
ML-DSA-44 validation for DNSSEC is enabled on 1.1.1.1 to test post-quantum signatures at scale.
Read the storyCloudflare Engineering
Security
Trust is built in the details. Notes on cryptography, protocols, and the cost of keeping systems secure.
Notes in this collectionThe latest noteCloudflare Engineering
All notes2