[Podcast] The October 2026 root KSK roll
In this episode of PING, Verisign’s Duane Wessels discusses the transition to the third DNS root KSK key pair, which is scheduled to begin signing the root zone on 11 October 2026.
Tag: DNSSEC
Secure by default: How ‘HSTS-Enforced’ could finally close the web’s oldest backdoor
Guest Post: The current web still relies on a legacy assumption that website should be accessible over unencrypted HTTP unless it explicitly signals otherwise. HSTS-Enforced builds on top of HSTS by inverting its security model.
[Podcast] DNS query duplication
Why does APNIC Labs experimental systems see almost all DNS queries twice or more?
[Podcast] Testing RSSAC 028 DNS root server name choices
A measurement study of how the DNS bootstrap priming query behaves when the root servers are renamed and DNSSEC signatures are added.
From workshop to deployment: How Bangladesh ccTLD implemented DNSSEC
Guest Post: How Bangladesh’s .BD ccTLD moved from no DNSSEC coverage to a fully validated chain of trust across its most critical SLDs, overcoming tooling gaps, operational failures, and infrastructure challenges along the way.
Authoritative DNS over encrypted transport at OARC 45
The use of encrypted DNS transports for communication between recursive resolvers and authoritative services in the DNS was an important topic of discussion OARC 46 in Edinburgh.
Rolling the root key
Have DNSSEC-validating recursive resolvers updated their Trust Anchor sets to include KSK-2024, and how can we measure whether this transition has been successfully adopted?
Revocation of X.509 certificates
‘Revocation is broken’ is a catchphrase in the world of certificates and Certificate Authorities. Certification infrastructure may not have been designed for the Internet of today.
NIST updates its secure DNS deployment guide: What operators need to know
NIST’s updated DNS deployment guide treats DNS as a core security control, offering practical guidance on protective DNS, encryption, DNSSEC, and both authoritative and recursive operations to help operators strengthen resilience, visibility, and policy enforcement.
How to talk about the trust in your devices: An IRTF draft
A review of Michael Richardson’s IRTF draft, a taxonomy of operational security considerations for manufacturer installed keys and trust anchors.