DSC and DNSTAP allow you to monitor all the DNS
Guest Post: DNSTAP’s ability to capture raw data enables users to have a greater insight into encrypted DNS.
Tag: DNS
Improving the privacy of DNS and DoH with oblivion
Are newly proposed DNS privacy measures bringing us closer to application-level autonomy from existing infrastructure?
Measuring the impact of DNS Flag Day 2020
Just how bad is packet fragmentation loss in the DNS? See the results of DNS Flag Day 2020.
DNS-over-HTTPS in Unbound
Guest Post: Newly released Unbound 1.12.0 comes with support for DNS-over-HTTPS.
DNSSEC: The long and bumpy road of algorithm deployment
Guest Post: Study finds that replacing outdated cryptographic algorithms can take more than four years.
Thoughts from IETF 109
Geoff Huston shares his thoughts from IETF 109, including on AS Prepending, Community Networks, DNS centrality, IPv6, and TCP.
How centralized is DNS traffic becoming?
Guest Post: Study shows big five content providers are at various stages of DNSSEC, IPv6 and TCP adoption.
Strict Transport Security vs. HTTPS Resource Records: the showdown
Guest Post: HTTPS RRs and STS look similar but there are subtle differences in the threat models and deployment tradeoffs of each.
How to use blocklists effectively
Guest post: Domain Name System Blocklists have their own specific advantages for inbox protection.
Improving packet capture performance: output
Guest post: The third entry in this series looks at how common packet capture tools can improve output.