Three of the best: Geoff Huston
Geoff was again in fine form in 2018 with insightful posts on DNS, IPv6, routing, and time.
Tag: DNSSEC
IPv6 misconceptions: It’s fake news
Guest Post: Google’s Jen Linkova sets straight some of the common IPv6 misconceptions she’s come across.
Analyzing the KSK roll
It’s time to look at the data to see what we can learn from the first roll of the root zone’s KSK.
Measuring the KSK Roll
APNIC Labs has been assisting with measuring how ready the Internet is for the DNS Root Zone KSK rollover.
Measuring ECDSA in DNSSEC: An Update
Has the use of elliptical curve cryptographic algorithms in generating digital signatures for securing the DNS improved since 2014?
DNSSEC ‘and’ DNS over TLS
A trustable DNS demands DNSSEC irrespective of the fate of DNS over TLS.
Sunrise DNS over TLS, sunset DNSSEC?
Guest Post: DNS over TLS brings reliable delivery of the DNS, which might make DNSSEC and DANE finally happen after all.
Bang for buck: the adoption of DNSSEC and return on investment
Guest Post: To what extent does price and return on investment play on the adoption of DNSSEC?
How well does ATR actually work?
Additional Truncated Response (ATR) does not completely fix the issue of large responses but it is worth considering if you want a faster DNS service.
Measuring the Root Zone KSK Trust
APNIC Labs attempts to validate the proportion of resolvers reporting trust in KSK-2017 ahead of the restart of the Root Zone DNS key roll process.