DNSSEC ‘and’ DNS over TLS
A trustable DNS demands DNSSEC irrespective of the fate of DNS over TLS.
IETF 102: An update on securing BGP
Geoff Huston analyses the current state of BGP security mechanisms based on his observations at the IETF 102 meeting.
The uncertainty of measuring the DNS
While there are a number of approaches to DNS measurement, all have their own forms of potential bias and uncertainty.
Looking back at the Internet’s past decade
What’s new, what’s old and what’s been forgotten in the past ten years of the Internet’s evolution?
What drives IPv6 deployment?
Geoff Huston delves into the statistics to test common theories on the deployment of IPv6. Are they true?
How well does ATR actually work?
Additional Truncated Response (ATR) does not completely fix the issue of large responses but it is worth considering if you want a faster DNS service.
Measuring the Root Zone KSK Trust
APNIC Labs attempts to validate the proportion of resolvers reporting trust in KSK-2017 ahead of the restart of the Root Zone DNS key roll process.
Opinion: Stuffing the Camel into the Bikeshed
Opinion: The collective enthusiasm for extending the Internet’s protocols should be matched by due care and constraint.
APNIC Labs enters into a research agreement with Cloudflare
APNIC Labs is partnering with Cloudflare for a joint research project relating to the operation of the DNS.
Just one QUIC bit
A proposal to add a “spin bit” to the QUIC protocol sparked much debate at IETF 101.