Authenticated bootstrapping of DNSSEC delegations
Guest Post: By transferring pre-existing trust from the zone’s DNS operator, a new in-band solution would simplify and secure automation of DNSSEC deployment.
Tag: DNSSEC
Notes from DNS-OARC 37
Zone file bug hunting, Adaptive DNSSEC, failure behaviour in the DNS, and more from DNS-OARC 37.
Resurrection of injection attacks
Guest Post: DNS transparency is a gaping hole in Internet security.
Disaster recovery with DNSSEC
Guest Post: How to recover from losing all the keys in your HSMs.
Three of the best: Security
Here are APNIC Blog’s top three posts related to security for 2021.
Notes from ICANN’s DNS Resolver Symposium
Resolver evolution, what users want, DNS tunnelling, and more from the recent Resolver Operator Forum.
Event Wrap: DNS-OARC 36
Geoff Huston presented at DNS-OARC 36, held online from 29 to 30 November 2021.
Notes from DNS-OARC 36
Slack’s DNSSEC debacle, NSEC problems, Measuring DNSSEC, and more from DNS-OARC 36.
Adoption of DNS security mechanisms related to ease-of-use, cost
Guest Post: Study shows ease-to-deploy and cost are important factors when it comes to using DNS security mechanisms.
Notes from DINR 2021
Presentations at DINR 2021 demonstrated a world of detail and complexity in current DNS research.