DNS cache snooping attacks
Guest Post: How to protect your servers from snooping (or should you even bother)?
Tag: DNS
DNS talk @ IETF 111
Geoff Huston’s snapshot of current working group activities related to the DNS.
Responses to Mozilla’s Trusted Recursive Resolver public consultation
Guest Post: The consultation closed six months ago but the promised analysis and conclusions have yet to be published, so Andrew Campling did his own.
Adventures in open DNS resolution: How to use threat intelligence for the public good
Guest Post: A lot of groups develop great cybersecurity intelligence. Can we apply that knowledge via public resolvers?
TCP Fast Open? Not so fast!
Guest Post: As TCP becomes more important to DNS, overhead is becoming an issue.
Cache me outside: A new look at DNS cache probing
Guest Post: DNS resolvers that ignore queries from outside their networks can still be queried indirectly through open DNS forwarders in their network.
Assessing DNSSEC with EdDSA
Comparing DNSSEC elliptical curve cryptographic algorithms.
Are large DNS messages falling to bits?
Guest Post: How much of a problem are large DNS responses over UDP, in the wild?
Event Wrap: ICANN DNS Symposium 2021
Geoff Huston and João Damas presented on ‘Measuring recursive resolver centrality’ at the ICANN DNS Symposium 2021, held online from 25 to 27 May 2021.
Notes from DNS-OARC 35
Geoff Huston’s thoughts on various topics from DNS-OARC 35.