Follow the latest coverage, related explainers and connected technology stories.
Cloudflare enabled verification of DNSSEC signatures using the NIST-standardized ML-DSA-44 algorithm on its 1.1.1.1 resolver, in a step to test the impact of large signatures and the risks of falling back to weaker traditional algorithms. The update does not yet represent a complete post-quantum chain of trust, as that requires adoption of the algorithm across DNS servers, records, and delegations all the way to the root.
Cloudflare redesigned how DNS records are stored in the Big Pineapple platform, which powers 1.1.1.1 and other DNS services, reducing memory per entry from 953 to 420 bytes and saving approximately 100 terabytes across its fleet. The insertion rate also increased by 43%, while lookup latency decreased by 19%.