Expanding DNSSEC Adoption

Cloudflare has announced full support for CDS (Child DS) and CDNSKEY from RFC 8078, allowing users to enable DNSSEC without requiring them to log in to their registrar to upload a DS record. This feature is now available for all Cloudflare-managed domains that enable DNSSEC in the dashboard. The adoption of DNSSEC has been slow due to issues such as lack of support from default DNS providers, varying levels of technical knowledge among users, and compatibility challenges among registrars. By supporting CDS and CDNSKEY records, Cloudflare aims to simplify the process of enabling DNSSEC for its customers and encourage more widespread adoption of this security measure.