DNSSEC with RSA-4096 keys
We must anticipate changes in computational capacity when choosing an encryption algorithm, but is it relevant to DNSSEC?
Tag: DNSSEC
DNSSEC KSK Ceremony 43
Guest Post: After issues at recent DNSSEC KSK ceremonies what can we expect at the next one?
DNS security and key ceremonies
Guest Post: What happens at a Root KSK ceremony? What’s at stake, and what could go wrong?
Observing DNSSEC key life cycles
Guest Post: A new visualization project is shedding light on how regularly DNSSEC are keys being updated.
Another DNS OARC meeting
Geoff shares his thoughts on what was being discussed the recent OARConline 35a.
TLS with DANE
RFC 9102: Trust versus credulity.
Multi-Signer DNSSEC models
Guest Post: Alternative models to zone transfer that can support DNSSEC’s non-standardized features.
DNS talk @ IETF 111
Geoff Huston’s snapshot of current working group activities related to the DNS.
Cryptography, rituals and transparency: The world of key ceremonies
What exactly is a ‘key ceremony’ and why are they important for trust?
Adventures in open DNS resolution: How to use threat intelligence for the public good
Guest Post: A lot of groups develop great cybersecurity intelligence. Can we apply that knowledge via public resolvers?