How well does ATR actually work?
Additional Truncated Response (ATR) does not completely fix the issue of large responses but it is worth considering if you want a faster DNS service.
Tag: DNSSEC
Measuring the Root Zone KSK Trust
APNIC Labs attempts to validate the proportion of resolvers reporting trust in KSK-2017 ahead of the restart of the Root Zone DNS key roll process.
Impressions from DNS-OARC 28
Geoff discusses some of the highlights of DNS-OARC 28, held in Puerto Rico earlier this month.
Peak DNSSEC?
Since 2016, APNIC Labs has observed a drop in global DNSSEC adoption. Have we passed the point of peak use of DNSSEC?
Bringing DNS security and privacy to the end user
Guest Post: Authentication and encryption should start at the edge of the network, with the end user.
Aggressive NSEC caching in BIND 9.12
Guest Post: Implementation of aggressive NSEC caching in BIND 9.12 should reduce the amount of traffic sent to root servers.
Register for APNIC workshops in Lao PDR
APNIC will deliver an IPv6 workshop from 29 to 31 January 2018, and a two-day DNS/DNSSEC workshop from 1 to 2 February 2018, in Vientiane, Lao PDR.
Update on the Root KSK Rollover Project
Guest Post: ICANN has announced that it will not roll the root zone KSK in the first quarter of 2018. Read why.
Why DNSSEC deployment remains so low
Guest Post: Learn about three ways that registries, registrars and third-party operators might be encouraged to deploy DNSSEC.
Helping resolvers to help the DNS
Relatively minor changes to recursive resolvers could make a significant difference to the operation of the DNS as a whole.