KSK Rollover Q&A with ISC’s Eddy Winstead
The Root Zone KSK rollover is coming. Are your systems ready?
Tag: DNSSEC
The surprising connection between HyperLoglog and DNSSEC NSEC3
Guest Post: Bert Hubert shares his trick to rapidly determine the number of DNSSEC secured delegations in a zone.
The Root of the DNS
Geoff discusses how the DNS and root servers function and provides some suggestions for the infrastructure to continue to be robust, scalable and accurate..
Let’s Encrypt with DANE
Domain Name certificates used to be expensive. In this post, I’ll walk through the process of setting up good, inexpensive and accessible DNS security using several public tools.
Speculating on DNS DDoS
What can be done to mitigate attacks on the DNS?
Third Party DNS Operator to Registrars / Registries Protocol
APNIC is testing a new protocol that allows service operators to easily notify of DNS changes.
DNSSEC and ECDSA
Two years ago I reported on the use of the elliptical curve cryptographic algorithm in generating digital signatures for DNSSEC. Let’s see what’s changed over the past 24 months.
Aggressive use of NSEC
Guest Post: Google’s Warren Kumari discusses the benefits of Next Secure (NSEC) and why it needs to be used in a more aggressive manner.
Update on the Root Zone Key Signing Key Rollover
ICANN recently announced the operational plans to “roll” the Root Zone Key Signing Key, an essential part of DNSSEC.
Register for our Network Security workshop in Hong Kong
Register for this two-day intermediate level workshop being held in conjunction with the HKNOG 3.0 conference, from 7 to 8 September in Hong Kong.