RESOURCE
Cloudflare's public 1.1.1.1 resolver now validates DNSSEC signatures made with ML-DSA-44, the NIST standardized post-quantum signature algorithm, one of the first production deployments of post-quantum DNS.
Cloudflare
Start with a conversation about your cryptographic posture.
On September 10, 2026, Cloudflare announced that its 1.1.1.1 public DNS resolver validates DNSSEC signatures produced with ML-DSA-44, the lattice based signature scheme NIST standardized in FIPS 204. The algorithm has been assigned DNSSEC algorithm number 18 by IANA, and Cloudflare says it follows the IETF draft for ML-DSA in DNSSEC. The resolver also applies downgrade protection: once a zone publishes ML-DSA-44 keys, at least one post-quantum validation path has to succeed.
The practical lesson is size. An ML-DSA-44 signature is 2,420 bytes, roughly 38 times an ECDSA P-256 signature, which pushes many responses past UDP limits and onto TCP. Cloudflare reports this is manageable at its scale, but it is exactly the kind of protocol level friction operators will meet as post-quantum signatures reach DNS, PKI, and firmware signing.
Cloudflare says signing support will follow in its authoritative DNS and registrar products, which would allow end to end post-quantum DNSSEC testing. For Canadian operators, this is a useful signal that the migration is now reaching shared internet infrastructure, not only TLS.
The part worth copying is the downgrade protection: once post-quantum keys are published, a classical only path is treated as a failure. That is the same rule the Cyber Centre's roadmap sets for you, disable, isolate or tunnel, not run alongside. The other lesson is size: post-quantum signatures are big, and your network will notice. Both are things a Discovery Program measures before they surprise you.