ICANN CTO says it will speed up post-quantum work on DNSSEC
ICANN chief technology officer John Crain told The Register on October 26, at an ICANN meeting in Bali, "We're going to speed up development" of DNSSEC protection against future quantum attacks. He said he did not know whether the time left was three years or five, but that it was probably not ten; this is not an official migration deadline. On September 10, 2026, Cloudflare said its 1.1.1.1 resolver now validates the post-quantum signature scheme ML-DSA-44, whose signatures are 2,420 bytes versus 64 bytes for ECDSA P-256, and Cloudflare says it requires at least one post-quantum validation path to succeed when parent DS records list a supported post-quantum algorithm. IANA has assigned ML-DSA-44 algorithm number 18 with a "MAY" implementation recommendation, and the individually submitted ML-DSA-MTL Internet-Draft (draft-03, October 19) anticipates more TCP traffic because its full responses exceed UDP size limits.