ICANN speeds up work to quantum-proof DNS

ICANN, the IETF and other internet governance bodies are accelerating efforts to protect DNS and DNSSEC against future quantum computers. ICANN CTO John Crain said readiness may be needed in three to five years rather than ten. Larger keys will require moving from UDP to TCP, which will take several years to deploy.

• Crain cut his DNS quantum-readiness estimate from 10 years to 3–5
• Larger DNSSEC keys will grow zones and packets, forcing a move from UDP to TCP
• Predictable deployment is expected in a few years
• The ICP-2 revision for RIRs is targeted for completion by end of 2026