Adoption of DNS security mechanisms related to ease-of-use, cost
Guest Post: Study shows ease-to-deploy and cost are important factors when it comes to using DNS security mechanisms.
Tag: DNS
Notes from DINR 2021
Presentations at DINR 2021 demonstrated a world of detail and complexity in current DNS research.
DNS at IETF 112
Geoff Huston on currently active IETF DNS discussion.
Notes from NANOG 83
Presentations on famous Internet outages, Internet control, anycast, and the future of IPv6.
RSA vs ECDSA for DNSSEC
Measuring whether we should use ECDSA.
DNS-over-TCP considered vulnerable
Guest Post: There are several ways attackers can force TCP to fragment for inclusion in IP fragmentation attacks.
DNSSEC provisioning automation with CDS/CDNSKEY in the real world
Guest Post: How DNSSEC Delegation Trust Maintenance can be automated via the DNS itself.
DNS openness
The evolution of the DNS reflects broader market pressures in the Internet at large.
Caching is key to interpreting root DNS anycast performance
Guest Post: Context is everything when it comes to assessing anycast.
Evaluation of anti-DDoS features in full-service resolvers
Guest Post: Simulating a DDoS attack, Japanese researchers tested a full-service resolver configured with both fetch-limit and serve-stale enabled.