← Feed

Posts

• Post #881225

  @sjosjo@mas.to Thanks. Luckily, from all of the service providers we depend on, changing domain registry is likely the easiest to do.

• Post #881224

  Wat mij verbaast aan alle ophef rond #digitalesoevereiniteit is er nog niet zo lang geleden kamervragen zijn gesteld over het voornemen van SIDN om een een deel van het domeinregistratiesysteem naar AWS wilden verhuizen. Nu weten we pas hoe afhankelijk de overheid zelf is van de Amerikaanse cloud; net als het overgrote deel van de Nederlandse internet-infrastructuur. SIDN draait tenminste nog gewoon zelf hun #DNS infrastructuur met #OpenSource software van Hollandsche makelij…

• Post #881222

  Routinator, our RPKI validation software, now sees more than 1000 Autonomous System Provider Authorization (ASPA) objects in the wild. These are published by operators to detect and prevent BGP route leaks. ASPAs can be created in the hosted RPKI services of the RIPE NCC and ARIN, as well as our open-source RPKI Certification Authority software, Krill. Open-source routing projects such as BIRD, OpenBGPD and FRRouting already offer support for ASPA, while major commercial vendor support is ex...

• Post #881221

  Another day, another email that starts with “We are security researchers from $ChineseUniversity and have discovered…” #DNS #OpenSource #Security

• Post #881173

  I'm honored to have been elected as Board Member at @dnsoarc. #DNS #LoveDNS #DNSSEC #NonProfit

• Post #796339

  The #DNS is super important for how the internet works, but it’s also getting more complicated as we go. The @dnsoarc community is where the brightest minds and all the operational experience come together. To make the most of this collective knowledge, we’ve launched an initiative to publish Best Current Practice (BCP) documents. If you’re aware of a DNS topic that urgently needs a #BCP, or if you’re interested in contributing to its creation, please share your thoughts below or connect wit...

• Post #290714

  Quite a number of people have asked why ‘dnst’ signs so much faster than ‘ldns’. I should note that we didn’t have performance as an initial design goal, just compatibility. So, we haven’t fully investigated the reasons for the difference. Some running theories are: - Though signing isn't multi-threaded yet, 'dnst’ does do multi-threaded sorting. - ‘ldns’ does NSEC chain building while loading the zone while ‘dnst’ loads and sorts it first then does the NSEC chain - 'd...