IPv6, DNS, and truncation in UDP
Measuring DNS resolver compliance with UDP response truncation standards in an IPv6-only DNS server environment.
Tag: DNS
KeyTrap
Just how ‘devastating’ is the Keytrap vulnerability? How it works, and what the response has been.
[Podcast] DELEG — in-band DNS delegation
Geoff Huston discusses a proposed new way to manage the DNS mechanisms for delegation.
China’s NXDOMAIN data: Part 3 — Differences across regions
Guest Post: Compare error response variations and their root causes in China’s regional provinces.
China’s NXDOMAIN data: Part 2 — Prominent domain patterns from QAX recursive resolver
Guest Post: Analysing the causes and impacts of erroneous domain names in China.
Event Wrap: OARC 42
Geoff Huston presented ‘Is the DNS ready for IPv6?’ at the DNS-OARC 42nd Workshop held in Charlotte, USA on 8 and 9 February 2024.
DNS and UDP truncation
Measuring DNS resolver compliance with UDP response truncation standards.
GAC communiqués and community activity on DNS abuse
The DNS Abuse Institute launches a new level of reporting that reveals how malicious phishing and malware are distributed across the DNS registration ecosystem.
Deep dive into China’s NXDOMAIN data
Guest Post: Comparing erroneous domain name queries between China and the global DNS system.
KeyTrap algorithmic complexity attacks exploit fundamental design flaw in DNSSEC
Guest Post: Researchers uncover and investigate ‘the worst attack on DNS ever discovered’.