DNS evolution
The DNS has evolved significantly during the Internet’s lifetime. What’s changed and what’s remained the same?
Tag: DNSSEC
[Podcast] Calling time on DNSSEC: Part 1 of 2
Geoff Huston discusses the market failure of DNSSEC in deployment.
DNS topics at RIPE 88
DNSSEC bootstrapping, DELEG update, DNS energy consumption, resolver BCP, and more from RIPE 88.
Calling time on DNSSEC?
Should we drop DNSSEC and just move on?
KeyTrap
Just how ‘devastating’ is the Keytrap vulnerability? How it works, and what the response has been.
KeyTrap algorithmic complexity attacks exploit fundamental design flaw in DNSSEC
Guest Post: Researchers uncover and investigate ‘the worst attack on DNS ever discovered’.
A quantum-safe cryptography DNSSEC testbed
Guest Post: Now is the time to prepare for the future of cryptography.
Notes from DNS OARC 42
DELEG Resource Records, DNS caching resolution failures, DNSSEC upgrades, DNS resilience, and more.
[Podcast] IPv6 fragmentation and the DNS
Discussing the implications of a change to IETF normative language.
DNS at IETF 118
Domain Control Validation, generalized notify, Compact Denial of Existence, and other areas of activity in DNS-related Working Groups.