Impact of scanning on authoritative nameservers
Guest Post: Investigating the risks of DNS scanning for the DNS infrastructure.
Tag: DNS
[Podcast] RISKY BIZ-ness
Gautam Akiwate discusses his prize-winning paper on risks in the DNS supply chain.
Three of the best: George Michaelson
In 2024, George Michaelson touched on topics ranging from news to explainers. Here are three of George’s best.
DNS nameservers
How recursive resolvers handle DNS queries and how can administrators optimize nameservers for performance and resilience?
Zeros are heroes: NSEC3 parameter settings in the wild
Guest Post: Do authoritative nameservers and resolvers follow best practices for NSEC3 settings?
Notes from DNS OARC 43
DNS as an attack platform, privacy and anonymity, authoritative server performance, and more from OARC 43.
Web PKI: How to protect a popular security service?
Guest Post: Lessons learned from a study on the interrelation of CAA, CT, and DANE in web PKI deployments.
[Podcast] Privacy and DNS Client Subnet
Geoff discusses EDNS0 client subnet signaling, how it affects traffic steering by the CDN, and the labs measurements.
[Podcast] The APNIC Labs measurement system
Joao Damas explains how the APNIC Labs measurement system works.
[Podcast] EDNS and UDP
Investigating the EDNS0 option for DNS, focusing on the specified maximum UDP packet size and its practical implications in the modern Internet.