DNS at IETF 112
Geoff Huston on currently active IETF DNS discussion.
Tag: DNSSEC
RSA vs ECDSA for DNSSEC
Measuring whether we should use ECDSA.
DNSSEC provisioning automation with CDS/CDNSKEY in the real world
Guest Post: How DNSSEC Delegation Trust Maintenance can be automated via the DNS itself.
DNS openness
The evolution of the DNS reflects broader market pressures in the Internet at large.
DNSSEC with RSA-4096 keys
We must anticipate changes in computational capacity when choosing an encryption algorithm, but is it relevant to DNSSEC?
DNSSEC KSK Ceremony 43
Guest Post: After issues at recent DNSSEC KSK ceremonies what can we expect at the next one?
DNS security and key ceremonies
Guest Post: What happens at a Root KSK ceremony? What’s at stake, and what could go wrong?
Observing DNSSEC key life cycles
Guest Post: A new visualization project is shedding light on how regularly DNSSEC are keys being updated.
Another DNS OARC meeting
Geoff shares his thoughts on what was being discussed the recent OARConline 35a.
TLS with DANE
RFC 9102: Trust versus credulity.