Cloudflare's 1.1.1.1 public DNS resolver now supports post-quantum DNSSEC. It utilizes NIST's ML-DSA-44 algorithm. This move aims to protect DNSSEC signatures from potential future quantum computer threats. The company detailed technical challenges, including managing large 2,420-byte signatures and mitigating downgrade risks at massive scale.
This announcement follows recent security-focused product updates from Cloudflare. The company introduced an AI-driven vulnerability discovery service in partnership with OpenAI. It also launched a new 'Adaptive Intelligence' engine for bot detection. These enhancements reinforce Cloudflare's focus on proactive and advanced threat mitigation. Cloudflare's stock saw a significant surge in the previous session, partly attributed to investor optimism around its AI security strategy.