[dns-operations] Question about DNSSEC algorithm support in domain registries, registrars

[Stefan Ubbink]

On Wed, 14 Oct 2026 09:48:59 +0200
Joe Abley via dns-operations <dns-operations at dns-oarc.net> wrote:

> Hi all,

Hello Joe,

> I am trying to build a picture of DNSSEC algorithm support in domain
> registries. This is motivated by some recent work at Cloudflare with
> the newly-minted, post-quantum algorithm 18, ML-DSA-44. [1]

[cut]

> If you are a TLD (g or cc or any other flavour) registrar or a
> registry operator and you know what your policy is for your TLDs,
> could you drop me a note and let me know? Off-list is fine, and I can
> summarise if there is interest in the results. If you have a link to
> a public reference that would be outstanding.
> 
> If you are on other mailing lists where TLD registry operators are
> known to lurk, please feel free to forward! That would be great.

After this email I asked around and got an answer and now we have
published some information on
https://www.sidn.nl/en/modern-internet-standards/dnssec

Since the page contains a lot of information, you have to look for the
section "Cryptographic algorithms" and then the question "Which
cryptographic algorithms does SIDN support for the .nl domain?".


> [1] https://datatracker.ietf.org/doc/draft-westerbaan-dnssec-mldsa/


-- 
Stefan Ubbink
DNS & Systems Engineer
Present: Mon, Tue, Wed, Fri
SIDN | Meander 501 | 6825 MD | Arnhem | The Netherlands
T +31 (0)26 352 55 00
https://www.sidn.nl