TLS with DANE
RFC 9102: Trust versus credulity.
Tag: security
Multi-Signer DNSSEC models
Guest Post: Alternative models to zone transfer that can support DNSSEC’s non-standardized features.
What is hitting our honeypots?
APNIC Senior Security Specialist Adli Wahid describes threats the APNIC Honeynet project has observed and how to mitigate them.
Twitter has introduced ROA. What does this change?
Twitter has begun Route Origin Authorization. Here’s what that actually means.
DNS cache snooping attacks
Guest Post: How to protect your servers from snooping (or should you even bother)?
Reducing the threat of day one exploits
Guest Post: How to build infrastructure for simplified patching and complete recovery.
More notes from IETF 111
Geoff Huston discusses currently active IETF areas that are not DNS related.
DNS talk @ IETF 111
Geoff Huston’s snapshot of current working group activities related to the DNS.
Decrypting TLS traffic with PolarProxy
Guest Post: A free (even for commercial use), generic, TLS decryption proxy for protocols using TLS encryption.
How can organizations support cybersecurity in the Pacific?
CERTs are a crucial pillar of cybersecurity in the Pacific, but they rely on support from teams inside other organizations.