ICANN speeds quantum-safe DNSSEC work as larger keys strain DNS
Original title: Work to protect DNS from quantum decryption attacks is speeding up
Crain now puts readiness at three to five years, not ten, while Category 1 domains show 45 percent higher abuse odds.
ICANN CTO John Crain said ICANN, the IETF and other bodies will accelerate work so DNSSEC remains secure once quantum computers can break conventional encryption. He now thinks that may be three or five years away rather than ten. Larger keys enlarge zones and responses and can force TCP instead of single UDP messages, and predictable deployment is still years off. At the same Bali meeting, a revised RIR lifecycle policy neared draft status and ICANN reported higher abuse odds for Category 1 domains.
Unconfirmed: Crain's three-to-five-year quantum timeline is his estimate, not a confirmed forecast.
- Crain said moving DNS from UDP to TCP predictably will take a few years.
- Revised ICP-2 adds audit, emergency continuity and derecognition, with ICANN as overseer.
- Jia-Rong Low hopes a final ICP-2 text is ready for review by the end of 2026.
- Category 1 domains such as .bank had a 45 percent higher chance of abuse.
- Those domains were less likely to have high abuse volumes.
From the original article
4 min read at theregister.comPLUS: Regional internet registry reform nears; Trustworthy-sounding domains attract scammers
By Simon Sharwood · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.