The best laid plans…
Never did anyone think a virus would be the trigger for the root signing emergency plan.
Tag: DNSSEC
An Opinion Piece on Internet Security
Opinion: Why has our public key certificate system failed the Internet so badly?
Drilling for the KSK
What happens when a safe containing the devices to facilitate the Root Signing Ceremony doesn’t open?
DNSSEC validation revisited
Over the past year, DNSSEC validation has rallied. Geoff Huston looks at what is behind the rise.
Deploying DNSSEC in a large enterprise
Guest Post: At Salesforce, we started our DNSSEC deployment by analysing our zones and finding third-party providers that satisfied our DNSSEC requirements.
Stats and games at JANOG 45
Guest Post: The snowy conditions outside did not deter attendees with over 1,500 people participating in the three-day conference.
Why dynamic DNS mapping prevents DNSSEC deployment
Guest Post: Study looks at why DNSSEC deployment remains so slow (and hard) in CDNs.
SHA-1 chosen prefix collisions and DNSSEC
Guest Post: The SHAmbles prefix collision attack against SHA-1 offers a new way for attackers to spook the DNS despite DNSSEC.
Three of the best: How to
Three of the our favourite ‘how to’ posts from 2019 on a range of tools and techniques.
Three of the best: Geoff Huston
Review 2019 through Geoff Huston’s eyes, with three of his best posts from the year past.