Notes from DNS-OARC 35
Geoff Huston’s thoughts on various topics from DNS-OARC 35.
Tag: DNSSEC
OARC 35 is coming to APAC
Guest Post: From 6 to 7 May 2021, OARC 35 will run in the Asia Pacific-friendly time zone of 11:00 to 18:30 (UTC +10).
Skidmap and malicious DNS data mining
Guest Post: Analysing hundreds of billions of daily DNS queries to produce actionable threat intelligence.
DNS at IETF 110
The amount of activity in the DNS at the IETF continues to grow.
Some DNS myths and misconceptions
An IETF technology deep dive.
Notes from NDSS DNS Privacy Workshop 2021
ODOH, protocol design tradeoffs and more.
Putting DNSSEC signers to the test: Knot vs Bind
APNIC had to migrate to a new DNSSEC signer, so we put our two favourite options to the test. Game on!
Notes from NANOG 81
Presentations on router history and routing security caught Geoff’s eye at NANOG 81.
Stop spoofed traffic at the door: Destination-side SAV
Guest Post: Roughly half of all ASes fail to filter for spoofed traffic as it enters their network border. A new tool helps admins test their own network in real time.
DoH the right thing
Opinion: The NSA recently issued some advice on DoH. It wasn’t necessarily bad advice, but it was not well received.