KeyTrap algorithmic complexity attacks exploit fundamental design flaw in DNSSEC
Guest Post: Researchers uncover and investigate ‘the worst attack on DNS ever discovered’.
Guest Post: Researchers uncover and investigate ‘the worst attack on DNS ever discovered’.
Guest Post: Now is the time to prepare for the future of cryptography.
DELEG Resource Records, DNS caching resolution failures, DNSSEC upgrades, DNS resilience, and more.
Discussing the implications of a change to IETF normative language.
Domain Control Validation, generalized notify, Compact Denial of Existence, and other areas of activity in DNS-related Working Groups.
Breaking down how APNIC Labs measures the adoption of DNSSEC validation.
Guest Post: Verisign to re-sign .com, .net, and .edu TLDs with new DNSSEC algorithms.
How much of the DNS namespace has been signed with DNSSEC?
Deploying ZONEMD in the root zone will help increase the security, stability and resiliency of the DNS.
Guest Post: Testing, and breaking, Multi-Signer models in Bind 9.