--- title: Work to protect DNS from quantum decryption attacks is... description: Internet governance bodies are likely to accelerate work to prepare the DNS so it can remain secure against quantum computers. ICANN CTO John Crain says... canonical: https://daily.dev/posts/work-to-protect-dns-from-quantum-decryption-attacks-is-speeding-up-dlxus6lkv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Work to protect DNS from quantum decryption attacks is speeding up | daily.dev og:description: Internet governance bodies are likely to accelerate work to prepare the DNS so it can remain secure against quantum computers. ICANN CTO John Crain says... og:url: https://daily.dev/posts/work-to-protect-dns-from-quantum-decryption-attacks-is-speeding-up-dlxus6lkv og:image: https://api.daily.dev/og/posts/dlXUs6LKV.png og:image:alt: Work to protect DNS from quantum decryption attacks is speeding up og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Work to protect DNS from quantum decryption attacks is speeding up **[The Register](https://daily.dev/sources/theregister)** · 5 min read · 0 upvotes · 0 comments ## Summary Internet governance bodies are likely to accelerate work to prepare the DNS so it can remain secure against quantum computers. ICANN CTO John Crain says predictions that quantum computers could come online 'at the turn of the decade' have changed his view of when the DNS needs to be made quantum safe, and he now thinks it may be three to five years rather than ten. One fix, larger keys, creates larger DNS packets that may force a shift from UDP to TCP, which Crain says will take 'a few years' to prepare. Separately, ICANN found that 'Category 1' domains like .bank and .doctor are more likely to be targeted by abusers and have a 45 percent higher chance of abuse than other GTLDs, though they are less likely to have high abuse volumes. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Why would making DNSSEC quantum-safe require switching DNS traffic from UDP to TCP? Quantum-resistant encryption needs larger cryptographic keys, which produce larger DNS zones, packets, and responses. These bigger responses can exceed the size limits of a single UDP message, forcing DNS traffic onto multiple TCP packets instead. ICANN's CTO John Crain says being ready to make that shift reliably will still take a few years of preparation work. _Teams planning for post-quantum DNSSEC can track infrastructure shifts like this one on daily.dev._ ### When do experts expect quantum computers to be able to break current DNS encryption? ICANN's chief technology officer John Crain says predictions point to capable quantum computers arriving 'at the turn of the decade.' He previously thought DNS had about ten years to prepare but now estimates it could be three to five years, prompting internet governance bodies to accelerate quantum-safe DNSSEC work. _Anyone tracking the post-quantum security timeline can follow DNS and encryption updates on daily.dev._ ### Are certain top-level domains like .bank or .pharmacy more likely to be abused by scammers? Yes, ICANN's Category 1 generic top-level domains, which include regulated strings like .bank, .doctor, and .university, have a 45 percent higher chance of being targeted by DNS abusers than other domains, according to ICANN security scientist Siôn Lloyd. However, these domains tend to have lower overall abuse volumes once targeted. _Developers evaluating domain trust signals can keep up with DNS abuse research on daily.dev._ ## Similar posts on daily.dev - [Microsoft, Google and Cloudflare just made 2029 the new quantum deadline](https://daily.dev/posts/microsoft-google-and-cloudflare-just-made-2029-the-new-quantum-deadline-r6dmkegc7) · The New Stack · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#quantum-computing](https://daily.dev/tags/quantum-computing), [#dns](https://daily.dev/tags/dns) [View this post on daily.dev](https://daily.dev/posts/work-to-protect-dns-from-quantum-decryption-attacks-is-speeding-up-dlxus6lkv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Work to protect DNS from quantum decryption attacks is speeding up","url":"https://daily.dev/posts/work-to-protect-dns-from-quantum-decryption-attacks-is-speeding-up-dlxus6lkv","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/work-to-protect-dns-from-quantum-decryption-attacks-is-speeding-up-dlxus6lkv"},"datePublished":"2026-10-26T04:11:33.949Z","dateModified":"2026-10-26T04:15:39.591Z","description":"Internet governance bodies are likely to accelerate work to prepare the DNS so it can remain secure against quantum computers. ICANN CTO John Crain says...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/789c6253e9b7c7000e63ab438f86a415?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/789c6253e9b7c7000e63ab438f86a415?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/work-to-protect-dns-from-quantum-decryption-attacks-is-speeding-up-dlxus6lkv","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,quantum-computing,dns","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"Work to protect DNS from quantum decryption attacks is speeding up"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/work-to-protect-dns-from-quantum-decryption-attacks-is-speeding-up-dlxus6lkv#faq","mainEntity":[{"@type":"Question","name":"Why would making DNSSEC quantum-safe require switching DNS traffic from UDP to TCP?","acceptedAnswer":{"@type":"Answer","text":"Quantum-resistant encryption needs larger cryptographic keys, which produce larger DNS zones, packets, and responses. These bigger responses can exceed the size limits of a single UDP message, forcing DNS traffic onto multiple TCP packets instead. ICANN's CTO John Crain says being ready to make that shift reliably will still take a few years of preparation work. Teams planning for post-quantum DNSSEC can track infrastructure shifts like this one on daily.dev."}},{"@type":"Question","name":"When do experts expect quantum computers to be able to break current DNS encryption?","acceptedAnswer":{"@type":"Answer","text":"ICANN's chief technology officer John Crain says predictions point to capable quantum computers arriving 'at the turn of the decade.' He previously thought DNS had about ten years to prepare but now estimates it could be three to five years, prompting internet governance bodies to accelerate quantum-safe DNSSEC work. Anyone tracking the post-quantum security timeline can follow DNS and encryption updates on daily.dev."}},{"@type":"Question","name":"Are certain top-level domains like .bank or .pharmacy more likely to be abused by scammers?","acceptedAnswer":{"@type":"Answer","text":"Yes, ICANN's Category 1 generic top-level domains, which include regulated strings like .bank, .doctor, and .university, have a 45 percent higher chance of being targeted by DNS abusers than other domains, according to ICANN security scientist Siôn Lloyd. However, these domains tend to have lower overall abuse volumes once targeted. Developers evaluating domain trust signals can keep up with DNS abuse research on daily.dev."}}]} ```