ICANN Speeds Up Timeline for Quantum Hardening of DNS At ICANN 87, VP John Crane said work is accelerating to make DNSSEC future-proof against quantum decryption, with readiness now seen as likely to be required in less than ten years and possibly three to five. Initial work is underway across ICANN, IETF and related bodies. The main limitation is operational, not theoretical: larger post-quantum keys will increase the size of DNS messages, pushing traffic beyond the UPP of one packet towards TCP. This makes it a protocol and infrastructure transition problem between resolvers, authoritative servers and networks, with deployment prediction still described as years away. Open sources - closed narratives.

ICANN Speeds Up Timeline for Quantum Hardening of DNS At ICANN 87, VP John Crane said work is accelerating to make DNSSEC future-proof against quantum decryption, with readiness now seen as likely to be required in less than ten years and possibly three to five. Initial work is underway across ICANN, IETF and related bodies. The main limitation is operational, not theoretical: larger post-quantum keys will increase the size of DNS messages, pushing traffic beyond the UPP of one packet towards TCP. This makes it a protocol and infrastructure transition problem between resolvers, authoritative servers and networks, with deployment prediction still described as years away. Open sources - closed narratives.