583/69 Tuesday, October 27, 2026
The Internet Corporation for Assigned Names and Numbers (ICANN) is accelerating efforts to strengthen the security of the Domain Name System (DNS) in preparation for quantum computing technologies that could potentially undermine current cryptographic standards. The increased urgency follows assessments suggesting that the timeframe in which quantum computers may become capable of breaking certain forms of encryption could shrink from decades to as little as five years. Such developments could directly affect DNS Security Extensions (DNSSEC), which are used to verify the authenticity and integrity of DNS records. ICANN is also addressing broader issues involving regional internet governance structures and cybercriminal groups that register seemingly trustworthy domain names for use in phishing and other fraudulent activities.
From a technical perspective, protecting DNSSEC against future quantum computing threats is expected to require larger cryptographic keys and signatures, which would increase the size of DNS packets. This could cause responses to exceed the practical limits of UDP, the protocol commonly used for DNS communications today, requiring greater reliance on TCP for data transmission. Preparing for such a transition presents technical challenges that may require several years of testing and implementation. At the same time, ICANN has reported that domain names in specially regulated Category 1 groups, such as .bank and .pharmacy, may be up to 45% more likely to be targeted for abuse than ordinary domains because attackers can use their trusted appearance to make phishing campaigns more convincing, although the overall volume of such abuse may remain relatively limited.
Although the transition toward technologies capable of addressing quantum-era threats is still under discussion and development, network administrators and organizations should closely monitor progress and prepare their infrastructure to handle increased DNS traffic over TCP in the future. To reduce the risk posed by deceptive domain names, users should continue verifying websites carefully even when a domain appears trustworthy. At the service-provider level, ICANN is also working to strengthen policies that would require domain registrars to take more effective action against domain holders who abuse their registrations, with the goal of reducing risk and improving security for internet users more broadly.