DNS topics at IETF 113
Handling resolution failure, truncated responses, stateful hash-based DNSSEC signatures, and more.
Tag: DNS
The multiple meanings of ’nameserver’ and ’DNS resolver’
Guest Post: There are two types of nameservers, and which one the term ‘nameserver’ refers to depends on the context.
How complex is the DNS?
Guest Post: Using the power of the DNAME record type, study shows DNS can express regular languages and pushdown systems.
Authenticated bootstrapping of DNSSEC delegations
Guest Post: By transferring pre-existing trust from the zone’s DNS operator, a new in-band solution would simplify and secure automation of DNSSEC deployment.
Event Wrap: NANOG 84
Geoff Huston presented on DNS openness at NANOG 84, held from 14 to 16 February 2022 in Austin, Texas.
Notes from DNS-OARC 37
Zone file bug hunting, Adaptive DNSSEC, failure behaviour in the DNS, and more from DNS-OARC 37.
Resurrection of injection attacks
Guest Post: DNS transparency is a gaping hole in Internet security.
Journeying into XDP: Fully-fledged DNS service augmentation
Guest Post: Fully-fledged DNS service augmentation is possible at the XDP layer and TC layer.
Opinion: DNS4EU
Opinion: What role does the public sector have in maintaining the DNS?
Stopping DNS-based DDoS attacks in their tracks
Guest Post: Researchers propose a mechanism for DNS servers to independently determine a client’s preferred protocol.