1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it

I like how an ML-DSA-44 RRSIG ends with a string AAAAAAAAAAAAAAAAAAA... a scream of relief it's finally out.