Quad9 now supports Ed25519 in 9.9.9.11

Quad9 is pleased to announce that our 9.9.9.11 (ECS) service is now validating domains which sign with the Ed25519 algorithm.

Quad9's non-ECS service, 9.9.9.9, has already had this functionality for many years.

In the past, Quad9 used a separate software implementation for our ECS service, and when originally deployed, Ed25519 had some issues which prevented us from enabling it. Admittedly, this remained in the backlog for quite some time.

As most domains signing with Ed25519 also sign with another algorithm, .11 would've still validated via the other, supported algorithm, when available, and thus the amount of domains which could not be successfully DNSSEC validated, due to only signing with Ed25519, were extremely few.

This website has great information about the differences and benefits that Ed25519 offers: https://ed25519.no/

Quad9 would like to thank our community for continually voicing their desire for this to be supported in 9.9.9.11.