Deep dive into China’s NXDOMAIN data
Guest Post: Comparing erroneous domain name queries between China and the global DNS system.
Tag: DNS
KeyTrap algorithmic complexity attacks exploit fundamental design flaw in DNSSEC
Guest Post: Researchers uncover and investigate ‘the worst attack on DNS ever discovered’.
Notes from DNS OARC 42
DELEG Resource Records, DNS caching resolution failures, DNSSEC upgrades, DNS resilience, and more.
[Podcast] DNS is the new BGP — how we really route things in the modern Internet
The role of DNS in steering how content is fetched and the changing landscape of decision-making for applications-level routing.
DNS and the proposed DELEG record
Changing the DNS mechanisms for delegation, a look at the proposed DELEG Resource Record.
[Podcast] Global Cyber Alliance measurements
Leslie Daigle discusses Global Cyber Alliance’s honeynet project, DNS, and MANRS.
OpenBSD PF-based firewalls suffer differently from DoS attacks
Guest Post: What to do if the PF state table limit is exhausted by UDP traffic.
[Podcast] IPv6 fragmentation and the DNS
Discussing the implications of a change to IETF normative language.
Three of the best: Security
Here are APNIC Blog’s top three posts related to Security for 2023.
Three of the best: Measurement
Measurement is always a popular topic on the APNIC Blog. Here are three of the best.