Test zones for DNSSEC with the post-quantum signature scheme ML-DSA-44 (algorithm 18, per draft-westerbaan-dnssec-mldsa). Your browser is fetching a page from each zone; green means the result matches what a secure resolver supporting ML-DSA-44 would do.
⌛ Waiting for results…
| Zone | Zone setup | Result |
|---|---|---|
| only | Valid ML-DSA-44 signatures; no P256 | ⌛ |
| dual | Valid ML-DSA-44 and P256 signatures | ⌛ |
| downgrade | Invalid ML-DSA-44 signatures; valid P256 | ⌛ |
| upgrade | Valid ML-DSA-44 signatures; invalid P256 | ⌛ |
| broken13 | Invalid P256 signatures; no ML-DSA-44 | ⌛ |