Help us test our DNSSEC implementation
Jan 29, 2015Filippo Valsorda
Summary
This post announces the public release of Cloudflare's first DNSSEC signed zone (www.cloudflare.com) for community analysis and feedback. It highlights the company's approach to modern DNSSEC implementation, including signing on the fly to prevent NSEC record exposure, using ECDSA for smaller answers and reduced reflection attack risk, and offering a managed solution. The post also includes a call for beta testers and a technical question about ECDSA algorithm numbers.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available