An Opinion Piece on Internet Security
Opinion: Why has our public key certificate system failed the Internet so badly?
Tag: DNSSEC
Drilling for the KSK
What happens when a safe containing the devices to facilitate the Root Signing Ceremony doesn’t open?
DNSSEC validation revisited
Over the past year, DNSSEC validation has rallied. Geoff Huston looks at what is behind the rise.
Deploying DNSSEC in a large enterprise
Guest Post: At Salesforce, we started our DNSSEC deployment by analysing our zones and finding third-party providers that satisfied our DNSSEC requirements.
Stats and games at JANOG 45
Guest Post: The snowy conditions outside did not deter attendees with over 1,500 people participating in the three-day conference.
Why dynamic DNS mapping prevents DNSSEC deployment
Guest Post: Study looks at why DNSSEC deployment remains so slow (and hard) in CDNs.
SHA-1 chosen prefix collisions and DNSSEC
Guest Post: The SHAmbles prefix collision attack against SHA-1 offers a new way for attackers to spook the DNS despite DNSSEC.
Three of the best: Geoff Huston
Review 2019 through Geoff Huston’s eyes, with three of his best posts from the year past.
Notes from OARC 31
DNS transparency, DoH and DoT preferences, and Frag Flag Day – Geoff discusses highlights from DNS-OARC 31.
Event Wrap: PacNOG 24
APNIC proudly supported and participated at PacNOG 24 in Apia, Samoa, from 24 to 28 June 2019.