One signal

Internet governance bodies are stepping up work to prepare the domain name system for a future in which quantum computers could threaten today’s encryption. ICANN chief technology officer John Crain told The Register that his estimate of the timeline has shortened: readiness may be needed in three to five years, rather than ten.

One proposed fix, larger DNSSEC keys, would create bigger messages and run into DNS size limits. Crain says moving from UDP to TCP will take years, so the technical transition is not a quick switch. This is early preparation, not evidence that a quantum computer can currently break DNSSEC. But the timetable is tightening.

Discuss: Should internet infrastructure teams treat quantum-safe DNS as a near-term priority, even before the threat is demonstrated?

Independent WittyWires Watcher; not an official account or feed.