Surfshark’s Dausos is a post-quantum VPN protocol designed to protect against future quantum computer threats, but it arrived broken. A TechRadar investigation revealed the protocol failed to load secure websites on standard home fiber connections, timing out during the critical ClientHello encryption handshake stage. The issue stemmed from static MTU (Maximum Transmission Unit) handling that clashed with residential PPPoE limits, which typically cap data packets at 1492 bytes. The bulky post-quantum encryption payload exceeded this threshold, rendering encrypted web access impossible on ordinary home networks. Surfshark acknowledged the flaw pre-publication, confirmed the diagnosis, and pushed an emergency hotfix for approval on the day the TechRadar article dropped.
Key Takeaways
- Dausos failed to load secure websites on home fiber due to MTU packet size conflicts with residential PPPoE limits.
- TechRadar’s manual MTU reduction to 1280 bytes restored access, proving the root cause and forcing Surfshark’s emergency response.
- Post-fix Dausos now works reliably and achieves up to 30% faster speeds than WireGuard and other industry protocols.
- Post-quantum encryption protects against future quantum computers breaking traditional VPN encryption without requiring user intervention.
- Enable post-quantum protection via Surfshark app > VPN Settings > Protocols > Select WireGuard or Dausos.
How the Post-Quantum VPN Protocol Dausos Failed and Got Fixed
The post-quantum VPN protocol Dausos arrived as Surfshark’s flagship innovation for quantum-resistant encryption. But on standard residential fiber connections, it simply did not work. TechRadar’s testing showed the protocol would hang indefinitely when attempting to establish encrypted connections to secure websites, failing at the ClientHello stage where encryption parameters are negotiated. The root cause: Dausos’s post-quantum encryption payload was too large for residential PPPoE connections, which impose strict packet size limits of around 1492 bytes. Every attempt to send the oversized encryption handshake resulted in a timeout, leaving users with a non-functional VPN.
The fix came from a manual workaround. By reducing the network MTU to 1280 bytes—a setting most home users never touch—TechRadar’s tester restored full access to encrypted websites within seconds. This proved the diagnosis and forced Surfshark’s hand. The company confirmed the issue pre-publication and pushed an emergency hotfix for approval on the day of TechRadar’s article. For a modern and advanced privacy product, this initial failure was clearly not ideal, as TechRadar noted. But the speed of the response and the subsequent fix demonstrated Surfshark’s commitment to resolving the flaw before widespread adoption.
Post-Quantum VPN Protocol Performance: Dausos Beats WireGuard by 30 Percent
After the fix, Dausos delivered on its speed promise. The post-quantum VPN protocol now achieves up to 30% faster speeds than WireGuard, OpenVPN, and IKEv2—the industry-standard protocols most VPN services rely on. This performance gain matters because post-quantum encryption is computationally heavier than traditional encryption, typically introducing overhead. Dausos manages to accelerate despite that burden, making it a genuine leap forward in fast, quantum-resistant VPN technology.
For comparison, WireGuard remains the gold standard for lean, modern protocol design—just 4,000 lines of code—and is fast enough for most users. OpenVPN’s UDP variant suits streaming and gaming, while its TCP mode provides stability on unstable networks. IKEv2 is rock-solid on mobile connections that frequently switch between WiFi and cellular. But none of these protocols were built with post-quantum threats in mind. Dausos fills that gap without sacrificing speed, making it a credible alternative for users who prioritize quantum-resistant encryption.
Enabling Post-Quantum Protection in Surfshark
Surfshark offers post-quantum encryption on two protocols: Dausos and WireGuard. Both are available across Windows, macOS, Linux, Android, and iOS, though Dausos was initially macOS-focused before the hotfix rolled out. To enable post-quantum protection, open the Surfshark app, navigate to VPN Settings, select Protocols, and choose either WireGuard or Dausos. Disable Auto-connect if you want to ensure the VPN consistently uses your chosen post-quantum protocol rather than switching to another protocol on reconnection.
The post-quantum VPN protocol integration is seamless. Unlike older encryption implementations that required manual configuration or separate keys, Surfshark’s post-quantum protection runs automatically once you select WireGuard or Dausos—no extra steps or user action needed. This matters because post-quantum encryption protects against future quantum computers breaking traditional encryption, a threat that is not immediate but grows more credible as quantum hardware advances. By embedding it into standard protocols, Surfshark lets users adopt quantum-resistant encryption without complexity.
The TechRadar MTU Workaround: A Temporary Fix for Home Users
Before Surfshark’s hotfix rolled out, home users experiencing Dausos connection failures could apply TechRadar’s manual MTU reduction as a temporary solution. This required opening a terminal and running a single command: sudo ifconfig [interface name] mtu 1280, where [interface name] is replaced with your actual network interface (typically en0 on macOS or eth0 on Linux). After executing the command, reconnecting to the VPN restored access to secure websites immediately, proving the MTU clash was the culprit.
This workaround was never intended as a permanent solution. Most home users do not have terminal access or comfort with command-line networking tools. But it served a critical purpose: it gave TechRadar proof of the root cause and forced Surfshark to acknowledge and fix the issue before the investigation went public. With the hotfix now deployed, this manual step is no longer necessary, and Dausos works out of the box on standard home connections.
Why Post-Quantum VPN Encryption Matters Now
Post-quantum encryption sounds like a distant concern, but it is a real cryptographic threat. Quantum computers powerful enough to break traditional encryption do not exist yet, but the cryptographic community treats their eventual arrival as inevitable. Once they arrive, any encrypted data captured today could be decrypted retroactively—a risk that governments, enterprises, and privacy-conscious individuals take seriously. By adopting post-quantum encryption now, Surfshark users protect their VPN traffic against this future threat, even if quantum computers remain years away.
The post-quantum VPN protocol approach is proactive, not reactive. Surfshark is betting that users care about long-term privacy, not just immediate anonymity. Dausos and post-quantum WireGuard represent that bet. The protocol’s initial failure was a stumble, but the rapid fix and the 30% speed improvement suggest Surfshark is serious about making post-quantum encryption the default for privacy-conscious users.
Should you switch to Dausos or post-quantum WireGuard?
If you use Surfshark and your device supports Dausos or post-quantum WireGuard, switching is worthwhile. The 30% speed improvement over standard protocols means you lose nothing in performance and gain quantum-resistant encryption. The only caveat: ensure Auto-connect is disabled so the VPN does not revert to a non-quantum-resistant protocol on reconnection. For users on older devices or platforms where Dausos is not yet available, post-quantum WireGuard is the next-best option.
Is the post-quantum VPN protocol Dausos available on all platforms?
Dausos was initially available on macOS before the hotfix expanded availability. Surfshark’s post-quantum WireGuard, however, is available across Windows, macOS, Linux, Android, and iOS. Check your app version and update to the latest build to access post-quantum protocols. If Dausos is not yet available on your platform, post-quantum WireGuard provides the same quantum-resistant protection.
What is the difference between Dausos and WireGuard for post-quantum encryption?
Both Dausos and WireGuard offer post-quantum protection in Surfshark, but Dausos is optimized for speed, delivering up to 30% faster performance. WireGuard is leaner and more widely compatible across platforms. If speed is your priority and Dausos is available on your device, choose Dausos. If you want the most stable, widely-tested post-quantum option, WireGuard is the safer bet. Either way, you get quantum-resistant encryption without compromise.
Surfshark’s Dausos protocol failure and rapid recovery demonstrate how security research works in the real world. A critical flaw arrived, a publication exposed it, the company fixed it, and users benefited. The post-quantum VPN protocol landscape is still young, but Dausos—now fixed and faster than the competition—signals that quantum-resistant VPNs are no longer theoretical. They are here, they work, and they are worth using.
Edited by the All Things Geek team.
Source: TechRadar
