DNS at IETF 112
Geoff Huston on currently active IETF DNS discussion.
Tag: DNS
Notes from NANOG 83
Presentations on famous Internet outages, Internet control, anycast, and the future of IPv6.
RSA vs ECDSA for DNSSEC
Measuring whether we should use ECDSA.
DNS-over-TCP considered vulnerable
Guest Post: There are several ways attackers can force TCP to fragment for inclusion in IP fragmentation attacks.
DNSSEC provisioning automation with CDS/CDNSKEY in the real world
Guest Post: How DNSSEC Delegation Trust Maintenance can be automated via the DNS itself.
DNS openness
The evolution of the DNS reflects broader market pressures in the Internet at large.
Caching is key to interpreting root DNS anycast performance
Guest Post: Context is everything when it comes to assessing anycast.
Evaluation of anti-DDoS features in full-service resolvers
Guest Post: Simulating a DDoS attack, Japanese researchers tested a full-service resolver configured with both fetch-limit and serve-stale enabled.
DNSSEC with RSA-4096 keys
We must anticipate changes in computational capacity when choosing an encryption algorithm, but is it relevant to DNSSEC?
DNSSEC KSK Ceremony 43
Guest Post: After issues at recent DNSSEC KSK ceremonies what can we expect at the next one?