Strict Transport Security vs. HTTPS Resource Records: the showdown
Guest Post: HTTPS RRs and STS look similar but there are subtle differences in the threat models and deployment tradeoffs of each.
Category:
Tech matters
APNIC now supports RFC-aligned ‘publish in parent’ self-hosted RPKI
APNIC’s RPKI publication service now supports the RFC 8181-aligned publication protocol and Krill system.
Moving RPKI beyond routing security
Guest Post: A proposal to allow Resource Tagged Attestations can be tested in Krill and Routinator with just a few simple steps.
RIPE Atlas marks 10 years with Software Probes Deployathon
Guest Post: RIPE Atlas is inviting you to participate in their next probe deployments, from the comfort of your own home.
How to use blocklists effectively
Guest post: Domain Name System Blocklists have their own specific advantages for inbox protection.
Caching with delayed hits
Guest Post: Novel caching strategy reduces caching latency by up to 60%.
PINT: Probabilistic In-band Network Telemetry
Guest Post: New network telemetry approach allows you to collect the data you care about while minimizing the number of overhead bits added to packets.
Improving packet capture performance: output
Guest post: The third entry in this series looks at how common packet capture tools can improve output.
FlashRoute: a new tool for traceroute scans
Guest Post: FlashRoute is 3x faster than other popular tracerouting tools.
DNSBLs for email filtering – an introduction
Guest post: If you run your own email infrastructure you will need content filtering, so get up to speed on Domain Name System Blocklists.