HSTS preload adoption and challenges
Guest Post: HSTS preload is a mitigation against a specific attack. How widely is it used?
Category:
Tech matters
A formal analysis of Karn’s Algorithm
Guest Post: Analysing Karn’s Algorithm and the RTO computations described in RFC 6298.
QUIC timers don’t work well
Guest Post: What’s wrong with RFC 9002?
[Podcast] Adding ZONEMD protections to the root zone
Deploying ZONEMD in the root zone will help increase the security, stability and resiliency of the DNS.
The joy of TXT
Guest Post: How are DNS TXT records really used?
Adding ZONEMD protections to the root zone
Guest Post: The new record type will add an additional layer of cryptographic security to ensure the reliability of root zone data.
Opinion: On Internet centrality and fragmentation
Dealing with dual pitfalls and risks.
Privacy and networking: Part 8 — IPv6 addresses and privacy
Guest Post: How IPv6 address renumbering works and why it doesn’t solve all privacy problems.
On Internet blowback
Guest Post: Measuring blowback — the phenomenon where a single probe to a target can generate multiple packets in response.
Measuring NXDOMAIN responses
Answering difficult questions about NXDOMAIN responses on recursive resolvers.