Revocation of X.509 certificates
‘Revocation is broken’ is a catchphrase in the world of certificates and Certificate Authorities. Certification infrastructure may not have been designed for the Internet of today.
Category:
Tech matters
Detecting and characterizing DDoS scrubbing from global BGP routing
Guest Post: Analysing public BGP data to characterize the real‑world behaviour of five major scrubbing services.
Using QUIC backscatter to infer hypergiant deployment configurations
Guest Post: What can we learn about QUIC deployments just by listening to unsolicited QUIC traffic? As it turns out, quite a lot.
Noisy routers: Investigating the make-up of route collector data
Guest Post: An analysis of more than 80 billion updates reveals how ‘noisy’ BGP updates inflate MRT archives, bias measurements, and highlights the need for more careful interpretation of BGP data.
[Podcast] IP networking in deep space
Marc Blanchet discusses modelling the delay of a deep space IP stack using Linux virtual network methods, and the suitability of QUIC as a transport for applications in space.
Exploring the blind spot of IXPs Route Servers
Guest Post: IRR-based filtering at IXPs often breaks the link between prefixes and their legitimate AS, allowing invalid announcements to slip through. This study measures the issue across many IXPs and offers actionable fixes.
Why are ‘we’ building all these data centres again?
An article in The Conversation argues that governments should ensure data centre developments serve the public interest.
NIST updates its secure DNS deployment guide: What operators need to know
NIST’s updated DNS deployment guide treats DNS as a core security control, offering practical guidance on protective DNS, encryption, DNSSEC, and both authoritative and recursive operations to help operators strengthen resilience, visibility, and policy enforcement.
CDNs, optical communications, and AI at NZNOG 2026
Geoff Huston attended NZNOG 2026, and shares some of what he found interesting.
Setting up Akvorado: A NetFlow analyser for your IPv6-first network
How to deploy Akvorado in a SOHO network to gain real-time visibility into traffic flows and improve IPv6 performance.