ECDSA and DNSSEC
Geoff Huston reports on a LABs experiment to measure the extent to which deployed DNSSEC-validating resolvers fully support the use of Elliptic Curve Digital Signature Algorithm (ECDSA) with curve P-256.
Search blog
Results for "DNS Geoff Huston"
[Podcast] What ‘name-based routing’ really means
Internet routing is shifting from IP-based forwarding to name-based decisions, with DNS and intermediaries steering requests. How does this work in practice, and who decides where your request is served from?
APNIC Secretariat Q1 2026 update
APNIC’s first quarterly update for 2026 provides a snapshot of the organization’s activities and performance following the May EC meeting.
RADIUS isn’t going away, so let’s fix it properly
Guest Post: “RADIUS is the protocol that will never die”. So given that RADIUS is staying, what do we need to do to make it secure for the next 30 years?
Pacific routing security sets a deadline
Guest Post: PITA 30 showed both the risks of insecure routing and the opportunities for rapid improvement in the Pacific, with PITA 31 set as an implementation target.
[Podcast] What does ‘BCP’ really mean?
A conversation with Geoff Huston on what ‘best’ and ‘current’ mean in BCP. Is it a reflection of what is deployed today, or an expression of what the community aims to achieve?
Upcoming keynotes and program highlights at APRICOT 2026
Gain new operational skills and insights, meet like-minded peers, and help shape the Internet at APRICOT 2026. Here’s some of what you can look forward to.
An open letter to future APNIC Fellows from a 2025 Fellow
Guest Post: APNIC 2025 Fellow Rabby prepares future Fellows to make the most of their Fellowship experience by sharing what he learned during his time as an APNIC Fellow.
BGP in 2025
Geoff Huston’s annual analysis of BGP routing table growth for 2025 and some projections.
Three of the best: Podcasts
Three of the best PING podcasts on Internet operations.