Cloudflare's Post-Quantum DNSSEC Test Moves Quantum Migration Into the Resolver
Cloudflare's 1.1.1.1 resolver can now validate ML-DSA-44 DNSSEC signatures. The important signal is not that DNS is suddenly quantum-safe, but that operators can now measure what 2,420-byte signatures do to the DNS transport and trust chain.
2026-09-19