1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it

Introduces the validation of ML-DSA-44 post-quantum DNSSEC signatures by 1.1.1.1. Details the challenges of large signature sizes (2,420 bytes) exceeding DNS UDP limits and the risk of downgrade attacks when supporting both conventional and post-quantum algorithms. Explains the mechanism used by 1.1.1.1 to prevent downgrades by requiring at least one valid post-quantum path and the importance of ecosystem-wide adoption for a complete post-quantum chain of trust.