Measuring the KSK Roll
APNIC Labs has been assisting with measuring how ready the Internet is for the DNS Root Zone KSK rollover.
Measuring ECDSA in DNSSEC: An Update
Has the use of elliptical curve cryptographic algorithms in generating digital signatures for securing the DNS improved since 2014?
DNSSEC ‘and’ DNS over TLS
A trustable DNS demands DNSSEC irrespective of the fate of DNS over TLS.
IETF 102: An update on securing BGP
Geoff Huston analyses the current state of BGP security mechanisms based on his observations at the IETF 102 meeting.
The uncertainty of measuring the DNS
While there are a number of approaches to DNS measurement, all have their own forms of potential bias and uncertainty.
Looking back at the Internet’s past decade
What’s new, what’s old and what’s been forgotten in the past ten years of the Internet’s evolution?
What drives IPv6 deployment?
Geoff Huston delves into the statistics to test common theories on the deployment of IPv6. Are they true?
How well does ATR actually work?
Additional Truncated Response (ATR) does not completely fix the issue of large responses but it is worth considering if you want a faster DNS service.
Measuring the Root Zone KSK Trust
APNIC Labs attempts to validate the proportion of resolvers reporting trust in KSK-2017 ahead of the restart of the Root Zone DNS key roll process.
Opinion: Stuffing the Camel into the Bikeshed
Opinion: The collective enthusiasm for extending the Internet’s protocols should be matched by due care and constraint.