tech · quantum risk

Is QUIC / HTTP/3 Quantum Proof? Network Security & PQC

Risk: high · Confidence: high · Reviewed: 2026-07-19

Verdict

QUIC/HTTP/3 is not quantum-proof by being modern UDP. It inherits TLS 1.3 cryptography—classical by default, hybrid/PQC when configured and supported end-to-end.

Overview

QUIC integrates TLS 1.3-style cryptography with a UDP transport used by HTTP/3. Quantum risk tracks the handshake and certificates, not the fact that it is not TCP.

Enterprise adoption must include middlebox and library support for hybrid KEMs—same operational theme as hybrid TLS enterprise.

Cryptographic profile

Signatures: TLS 1.3-based handshake crypto inside QUIC, Certificate authentication as in TLS
Hash: QUIC/TLS transcript hashing
Public-key exposure: Same certificate and KEM story as TLS 1.3 deployments, different transport framing.

What breaks

Classical TLS 1.3 KEMs inside QUIC
CDN/origin mismatches on hybrid support
Certificate algorithms lagging KEM upgrades

Mitigations

Track QUIC stack hybrid support (clients, CDNs, origins)
Align with hybrid TLS enterprise pilots
Inventory HTTP/3 termination points

FAQ

Is HTTP/3 quantum-safe?

Only if its TLS cryptography is hybrid/PQC—HTTP version alone does not decide.

Relation to TCP TLS?

Shared cryptographic lessons; different operational breakage modes (UDP, middleboxes).

Key concepts (technical dictionary)

Terms used on this page — open a definition:

Full technical dictionary →