CLOUDFLAREVERIFIED
1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
Checked 28 Sep 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.
Open the official publisher source
← Lifecycle catalogue
PRODUCT UPDATECLOUDFLAREVERIFIED
PUBLISHER UPDATE · CLOUDFLARE-8880040BF8556F3F
CLOUDFLARE-8880040BF8556F3F release notes and known issues
1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
Scope: Cloudflare products. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.
Summary
1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.
Improvements and security content
- 1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.
Known issues
Publisher statementNot stated. The verified publisher record does not contain a known-issues statement.
Affected products and versions
Products
- Cloudflare products
Affected versions
- 1.1.1.1
Fixed versions or updates
- No fixed version is stated in this record.
Recommended action
Review the official publisher document before deployment.