The DOs and don’ts of post-quantum DNSSEC
Post-quantum signatures could dramatically enlarge DNSSEC responses, shifting many queries from UDP to TCP. Should resolvers limit unnecessary DNSSEC data, or is greater TCP use inevitable?
By Geoff Huston on 9 Nov 2026
Post-quantum signatures could dramatically enlarge DNSSEC responses, shifting many queries from UDP to TCP. Should resolvers limit unnecessary DNSSEC data, or is greater TCP use inevitable?
Post-quantum signatures could dramatically enlarge DNSSEC responses, shifting many queries from UDP to TCP. Should resolvers limit unnecessary DNSSEC data, or is greater TCP use inevitable?
Guest Post: Packet captures are the ground truth of network operations, but analysing them is slow, requires specialist expertise, and does not scale. PCAP-LM rewrites captures into a form that AI assistants can read, helping address that mismatch.
Guest Post: When international links fail, hidden dependencies can take local services with them. Here’s how operators can design for local resilience.
Guest Post: Solar photovoltaics and battery storage can provide reliable power for network infrastructure, even in remote locations. Here’s what’s good to know before selecting equipment.
Does TLS make DNSSEC unnecessary? An examination of common DNSSEC assumptions challenges that argument and considers DNSSEC’s role in establishing trust, the risks of partial deployment, and the evidence from real-world outages.
Registration for the APRICOT 2027 Summit, being held from 24 February to 4 March 2027 in Hong Kong SAR, China, is now open. All registrations and payments completed on or before 15 November 2026 receive the early bird rate.
Guest Post: A study found that changing VPN providers can change where web traffic appears to be served, affecting conclusions about domestic infrastructure, cross-border traffic, and data localization.
APNIC has updated its conference host and location selection process for stand-alone conferences to give prospective hosts clearer guidance and make assessment and decision-making more transparent.
Darren Kara discusses how the Quad9 Public DNS server balances privacy, measurement, and global threat intelligence to help protect users from malicious destinations.
Hyperscaler investment in submarine cables and the rise of LEO satellite systems are reshaping who builds, owns, and operates the networks that underpin global connectivity.