The path to resolverless DNS
Making sense of resolverless name resolution.
Tag: DNSSEC
DNS topics at IETF 113
Handling resolution failure, truncated responses, stateful hash-based DNSSEC signatures, and more.
DNSSEC algorithms for TLDs (and everyone else)
Guest Post: Has the time come to phase out 1,024-bit RSA from the DNSSEC ecosystem?
Authenticated bootstrapping of DNSSEC delegations
Guest Post: By transferring pre-existing trust from the zone’s DNS operator, a new in-band solution would simplify and secure automation of DNSSEC deployment.
Notes from DNS-OARC 37
Zone file bug hunting, Adaptive DNSSEC, failure behaviour in the DNS, and more from DNS-OARC 37.
Resurrection of injection attacks
Guest Post: DNS transparency is a gaping hole in Internet security.
Disaster recovery with DNSSEC
Guest Post: How to recover from losing all the keys in your HSMs.
Three of the best: Security
Here are APNIC Blog’s top three posts related to security for 2021.
Notes from ICANN’s DNS Resolver Symposium
Resolver evolution, what users want, DNS tunnelling, and more from the recent Resolver Operator Forum.
Event Wrap: DNS-OARC 36
Geoff Huston presented at DNS-OARC 36, held online from 29 to 30 November 2021.