Notes from DNS-OARC 36
Slack’s DNSSEC debacle, NSEC problems, Measuring DNSSEC, and more from DNS-OARC 36.
Tag: DNSSEC
Adoption of DNS security mechanisms related to ease-of-use, cost
Guest Post: Study shows ease-to-deploy and cost are important factors when it comes to using DNS security mechanisms.
Notes from DINR 2021
Presentations at DINR 2021 demonstrated a world of detail and complexity in current DNS research.
DNS at IETF 112
Geoff Huston on currently active IETF DNS discussion.
RSA vs ECDSA for DNSSEC
Measuring whether we should use ECDSA.
DNSSEC provisioning automation with CDS/CDNSKEY in the real world
Guest Post: How DNSSEC Delegation Trust Maintenance can be automated via the DNS itself.
DNS openness
The evolution of the DNS reflects broader market pressures in the Internet at large.
DNSSEC with RSA-4096 keys
We must anticipate changes in computational capacity when choosing an encryption algorithm, but is it relevant to DNSSEC?
DNSSEC KSK Ceremony 43
Guest Post: After issues at recent DNSSEC KSK ceremonies what can we expect at the next one?
DNS security and key ceremonies
Guest Post: What happens at a Root KSK ceremony? What’s at stake, and what could go wrong?