How complex is the DNS?
Guest Post: Using the power of the DNAME record type, study shows DNS can express regular languages and pushdown systems.
Tag: DNS
Authenticated bootstrapping of DNSSEC delegations
Guest Post: By transferring pre-existing trust from the zone’s DNS operator, a new in-band solution would simplify and secure automation of DNSSEC deployment.
Event Wrap: NANOG 84
Geoff Huston presented on DNS openness at NANOG 84, held from 14 to 16 February 2022 in Austin, Texas.
Notes from DNS-OARC 37
Zone file bug hunting, Adaptive DNSSEC, failure behaviour in the DNS, and more from DNS-OARC 37.
Resurrection of injection attacks
Guest Post: DNS transparency is a gaping hole in Internet security.
Journeying into XDP: Fully-fledged DNS service augmentation
Guest Post: Fully-fledged DNS service augmentation is possible at the XDP layer and TC layer.
Opinion: DNS4EU
Opinion: What role does the public sector have in maintaining the DNS?
Stopping DNS-based DDoS attacks in their tracks
Guest Post: Researchers propose a mechanism for DNS servers to independently determine a client’s preferred protocol.
Measuring DNS-over-HTTPS performance around the world
Guest Post: How does DoH compare to the default DNS-over-UDP using port 53 (Do53) around the world?
DNS vulnerability, configuration errors can cause DDoS
Guest Post: An overlooked DNS vulnerability that, when combined with a configuration error, is leading to massive DNS traffic surges.