aiqbench analysis
Cloudflare's integration of ML-DSA-44 signatures into its 1.1.1.1 resolver marks a critical real-world test for post-quantum cryptography, specifically evaluating the performance impact of significantly larger signature sizes on network bandwidth and packet processing. This deployment highlights the engineering challenges inherent in transitioning DNS infrastructure from classical algorithms to NIST-standardized quantum-resistant schemes before full ecosystem adoption is possible.
Cloudflare’s 1.1.1.1 resolver validates ML-DSA-44 signatures.

Cloudflare’s 1.1.1.1 resolver now validates DNSSEC records using ML-DSA-44, a NIST-standardized post-quantum signature scheme.
Cloudflare’s 1.1.1.1 resolver now validates signatures created using ML-DSA-44, a NIST-standardized post-quantum signature scheme, marking one of the first major public DNS resolvers to adopt this technology in a live environment. The change…
Excerpt shown under the publisher's RSS terms · 33 words · full text and figures are on the publisher's site
Related coverage

The keys to the Internet change on October 11. Are you ready?
Cloudflare Blog · Oct 6, 2026

Building an evidence-grounded agentic security operations harness on Cloudflare
Cloudflare Blog · Oct 7, 2026

Security in the Post-Quantum Era, What Changes Once the Migration Is Done
Quantum Zeitgeist · Sep 11, 2026

Cloudflare will issue quantum-resistant certificates with Merkle Trees
Quantum Zeitgeist · Sep 29, 2026