Notes from DNS-OARC 38
DoQ for authoritative servers, DNS spoofing countermeasures at Google, the cost of DNSSEC validation, and more from DNS-OARC 38.
Tag: DNSSEC
Addressing the challenges of modern DNS
Guest Post: A comprehensive look at real world deployments and open challenges.
[Podcast] Why a resolverless DNS makes sense
PING E15: Server push, combined with DNSSEC could help make DNS resolvers a thing of the past.
The path to resolverless DNS
Making sense of resolverless name resolution.
DNS topics at IETF 113
Handling resolution failure, truncated responses, stateful hash-based DNSSEC signatures, and more.
DNSSEC algorithms for TLDs (and everyone else)
Guest Post: Has the time come to phase out 1,024-bit RSA from the DNSSEC ecosystem?
Authenticated bootstrapping of DNSSEC delegations
Guest Post: By transferring pre-existing trust from the zone’s DNS operator, a new in-band solution would simplify and secure automation of DNSSEC deployment.
Notes from DNS-OARC 37
Zone file bug hunting, Adaptive DNSSEC, failure behaviour in the DNS, and more from DNS-OARC 37.
Resurrection of injection attacks
Guest Post: DNS transparency is a gaping hole in Internet security.
Disaster recovery with DNSSEC
Guest Post: How to recover from losing all the keys in your HSMs.