Tracing the DDoS attack ecosystem from the Internet core
Guest Post: New method observes DDoS intensity by measuring infrastructure involved in attacks using IXPs.
Tag: DNS
The Hijackers Guide to the Galaxy: Off-path taking over Internet resources
Guest Post: Are current practices of managing IP addresses, domains, certificates, and virtual platforms insecure?
Event Wrap: APAC DNS Forum
Geoff Huston shared insights on the future of the DNS at the APAC DNS Forum, held online from 30 March to 1 April 2022.
DNS topics at IETF 113
Handling resolution failure, truncated responses, stateful hash-based DNSSEC signatures, and more.
The multiple meanings of ’nameserver’ and ’DNS resolver’
Guest Post: There are two types of nameservers, and which one the term ‘nameserver’ refers to depends on the context.
How complex is the DNS?
Guest Post: Using the power of the DNAME record type, study shows DNS can express regular languages and pushdown systems.
Authenticated bootstrapping of DNSSEC delegations
Guest Post: By transferring pre-existing trust from the zone’s DNS operator, a new in-band solution would simplify and secure automation of DNSSEC deployment.
Event Wrap: NANOG 84
Geoff Huston presented on DNS openness at NANOG 84, held from 14 to 16 February 2022 in Austin, Texas.
Notes from DNS-OARC 37
Zone file bug hunting, Adaptive DNSSEC, failure behaviour in the DNS, and more from DNS-OARC 37.
Resurrection of injection attacks
Guest Post: DNS transparency is a gaping hole in Internet security.