DNS-over-TCP considered vulnerable
Guest Post: There are several ways attackers can force TCP to fragment for inclusion in IP fragmentation attacks.
Search blog
Results for "IETF 100"
DNSSEC provisioning automation with CDS/CDNSKEY in the real world
Guest Post: How DNSSEC Delegation Trust Maintenance can be automated via the DNS itself.
DNS openness
The evolution of the DNS reflects broader market pressures in the Internet at large.
DNSSEC with RSA-4096 keys
We must anticipate changes in computational capacity when choosing an encryption algorithm, but is it relevant to DNSSEC?
The role of service providers in transforming security
Guest Post: To combat cyber threats to organizations of all sizes, we need to rethink how information security is delivered and managed.
Another DNS OARC meeting
Geoff shares his thoughts on what was being discussed the recent OARConline 35a.
Basic routing concepts, part 1: Prefixes
Prefixes are fundamental to routing. How do they work?
A brief history of the RFC format
No overstriking allowed! Why do RFCs have such strict text requirements?
Reducing the threat of day one exploits
Guest Post: How to build infrastructure for simplified patching and complete recovery.
Where text protocols came from, and why they’re not going anywhere
Text protocols can be read by humans, but they come with drawbacks. Do we need them?