As cited
Copy frozen at (site build).
government policy
Work to protect DNS from quantum decryption attacks is speeding up
Internet governance bodies are accelerating work to quantum-proof the domain name system (DNS) and its security extensions (DNSSEC) in response to advancing quantum computing timelines, with officials now estimating deployment readiness within three to five years rather than ten. Addressing this challenge requires larger cryptographic keys that exceed current DNS message size limits, necessitating a transition from UDP to TCP for DNS traffic. Separately, ICANN is reforming governance documents for regional internet registries, investigating abuse patterns across regulated domain extensions, and progressing toward a new round of generic top-level domain applications.
Why it matters: DNS infrastructure operators and security teams should monitor DNSSEC modernization efforts, as migration to quantum-resistant algorithms and TCP-based DNS will require coordination and testing across authoritative nameservers and resolvers. Organizations managing .bank, .doctor, and other Category 1 domains face higher abuse risks and new registrar enforcement policies under development. Domain registrars must prepare for evolving automated registration regulations and potential increases in top-level domain application rounds.
- Source published
- First seen by Cybersecurity Tracker