NANOG 74: Securing the routing system
The level of interest in the general topic of routing security peaked at the recent NANOG meeting, with several thought-provoking presentations on the topic.
DOH! DNS over HTTPS explained
A deeper look at the potential benefits of DNS over HTTPS, or DOH.
Measuring the KSK Roll
APNIC Labs has been assisting with measuring how ready the Internet is for the DNS Root Zone KSK rollover.
Measuring ECDSA in DNSSEC: An Update
Has the use of elliptical curve cryptographic algorithms in generating digital signatures for securing the DNS improved since 2014?
DNSSEC ‘and’ DNS over TLS
A trustable DNS demands DNSSEC irrespective of the fate of DNS over TLS.
IETF 102: An update on securing BGP
Geoff Huston analyses the current state of BGP security mechanisms based on his observations at the IETF 102 meeting.
The uncertainty of measuring the DNS
While there are a number of approaches to DNS measurement, all have their own forms of potential bias and uncertainty.
Looking back at the Internet’s past decade
What’s new, what’s old and what’s been forgotten in the past ten years of the Internet’s evolution?
What drives IPv6 deployment?
Geoff Huston delves into the statistics to test common theories on the deployment of IPv6. Are they true?
How well does ATR actually work?
Additional Truncated Response (ATR) does not completely fix the issue of large responses but it is worth considering if you want a faster DNS service.