Product

1.1.1.1

1 mentions in 7 days · 3 in 30 days · 3 total · first seen Aug 26, 2026 · last 5d ago

Timeline3 articles

1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it

Cloudflare's 1.1.1.1 resolver now validates post-quantum DNSSEC signatures using ML-DSA-44, a 2,420-byte NIST algorithm, preparing DNS for post-quantum migration by 2029.

Cloudflare enabled 1.1.1.1 to validate DNSSEC signatures using ML-DSA-44 (algorithm 18), a NIST-standardized post-quantum signature with 1,312-byte public keys and 2,420-byte signatures, roughly 38x larger than ECDSA P-256. The large signatures exceed common DNS-over-UDP limits, forcing fallback to TCP and creating downgrade risks while conventional algorithms must be published alongside. Cloudflare cites the risk of a quantum computer breaking RSA/ECDSA signatures by 2030 and plans full post-quantum security by 2029.

Cloudflare BlogSep 10, 13:00 UTC · 5d agoTools

How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache

Cloudflare cut per-entry memory 56% in 1.1.1.1's DNS cache via five Rust optimizations, freeing about 100 TB across its fleet.

Cloudflare engineers applied five Rust-level memory optimizations to the Big Pineapple DNS cache layout behind the 1.1.1.1 resolver. The changes cut per-entry memory usage by 56%, freeing approximately 100 terabytes of memory across the fleet.

Cloudflare BlogAug 27, 17:02 UTC · 19d agoOther

Risky Bulletin: Russia starts blocking DoH and DoT

Russian users report blocks on DoH and DoT servers, including Cloudflare 1.1.1.1 and Google 8.8.8.8, in an apparent censorship crackdown.

Russian internet users began reporting failures connecting to DNS-over-HTTPS and DNS-over-TLS servers, suggesting a government crackdown on the two privacy protocols. The blocks reportedly cover Cloudflare's 1.1.1.1 and Google's 8.8.8.8 resolvers; Roskomnadzor has not officially confirmed the action. The agency tested a similar block in March on Beeline's network and had named DoH for blocking as early as 2021. The bulletin also briefly notes state-sponsored phishing of EU officials, a DDoS against Norway's Digdir, the ReliaQuest/ShinyHunters dispute, and older ransomware and breach disclosures.

Risky Business NewsAug 26, 03:07 UTC · 20d agoPolicy & legal1

Appears with

vendor Cloudflare 3 threat actor NoName057 1 threat actor ShinyHunters 1 ai model ML-DSA-44 1 organization CERT-EU 1 organization NIST 1 organization Roskomnadzor 1 product 8.8.8.8 1 vendor Beeline 1 vendor Google 1 victim Autism Services of Saskatoon 1 victim Digdir 1 victim Nutex Health 1 victim Paylogix 1 threat actor Akira 1 victim ReliaQuest 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.