Abstract
Cloudflare is working to implement its first post-quantum DNSSEC algorithm, namely ML-DSA-44 (algorithm 18). We will present our progress to date in implementing algorithm 18 in a large-scale distributed public resolver (1.1.1.1), its use in online signing, considerations around validation policy and downgrade attacks through a PQ lens and gaps we have found in the surrounding landscape of domain registries and registrars.
Recording
Video will be added soon.
Speaker
Joe Abley
Joe works at Cloudflare where he does his best to help build a better Internet. He has been known to make trouble on mailing lists.
Rate this talk
Rating will open: Monday, 26 October 2026 09:00 (+0200).