Looking for what’s not there
How effective is NSEC caching today?
Tag: DNSSEC
Network protocols and their use: BGP and DNSSEC
Geoff takes a look at the initial design expectations and the deployment realities of BGP and DNSSEC.
DNS-OARC 30: Bad news for DANE
Geoff Huston shares his thoughts from DNS-OARC 30.
How to: Deploying DNSSEC with BIND and Ubuntu Server
Follow this step-by-step guide to set up DNSSEC using BIND and Ubuntu Server.
Improving the availability and resilience of the root zone in the DNS
Hyperlocal roots or NSEC caching? Geoff Huston shares his thoughts on these new ways to make the DNS root zone more resilient.
The state of DNSSEC validation
Why did DNSSEC validation fall and only regained momentum in the last recent six months?
Are you ready for DNS Flag Day?
Guest Post: DNSSEC authoritative server operators need to prepare themselves for upcoming DNS maintenance happening this January.
Three of the best: Geoff Huston
Geoff was again in fine form in 2018 with insightful posts on DNS, IPv6, routing, and time.
IPv6 misconceptions: It’s fake news
Guest Post: Google’s Jen Linkova sets straight some of the common IPv6 misconceptions she’s come across.
Analyzing the KSK roll
It’s time to look at the data to see what we can learn from the first roll of the root zone’s KSK.