The Next DNS Root Key Roll Is Underway, and Adoption of the New Key Is Dangerously Low
APNIC measurements show fewer than 20% of users behind DNSSEC-validating resolvers have adopted KSK-2024, the incoming root key signing key, even though the roll is set for October 2026.
Bangladesh's .bd Country Domain Moves From DNSSEC Workshop to Live Deployment
A reader asks about RDAP support, DNSSEC timing, and updating whois records after Bangladesh's .bd ccTLD moved from DNSSEC workshop to deployment.
OARC 45 Hears Why Encrypting the DNS Resolver-to-Authoritative Hop Has Stalled
A new report from OARC 45 reveals that encrypted DNS between recursive resolvers and authoritative servers remains largely undeployed, with only 0.93% of domains supporting any encrypted transport, and explains why both…
New IRTF Draft Maps Trust Anchors and Manufacturer-Installed Keys for Smarter Device Security
An IRTF draft now in its 14th iteration offers a taxonomy for understanding how trust is built into IoT devices, from factory-installed keys to the global DNSSEC trust anchor.
NIST Revises Secure DNS Guide, Treating DNS as a Security and Resilience Control
New NIST guidance moves DNS from background infrastructure to an active security control, covering protective DNS, DNSSEC validation, encrypted protocols, and logging for operators.
Hundreds of Queries for One Domain: The Hidden Work Behind a Cold Start DNS Lookup
A fresh look at what happens when a DNS resolver boots with an empty cache reveals why some names demand dozens or even hundreds of queries, and how resolver design balances speed against resilience.
Is DNS Resolution Becoming Too Centralized? New Measurements Paint a Mixed Picture
A new APNIC analysis examines concentration in DNS name registration and resolution markets, revealing a fragmented registrar landscape but a potential concentration of recursive resolver usage.
Securing the DNS Root: Testing Six Naming Schemes and the Road to DNSSEC Protection
A recent measurement study evaluates six different naming strategies for the Internet’s root DNS servers, examining whether DNSSEC can be added to secure the essential bootstrapping process without breaking compatibility…
Massive DNS Query Duplication Found by APNIC, 38% of Queries Repeated Unnecessarily
A new study from APNIC Labs shows that over 38% of DNS queries are duplicates, with some regions exceeding 60%, highlighting a tragedy of the commons in the internet's naming system.
Beyond the surface: The three layers of DNS resilience that keep websites online
New research reveals the multi-layered infrastructure behind domain names and uncovers common weak spots in authoritative DNS setups, especially among government services.
Why Your DNS Queries Are Often Sent Twice: APNIC Labs Reveals Widespread Duplication
New measurements show most DNS queries are duplicated within seconds, due to caches, browsers, and DNSSEC. Here’s what that means for your privacy and security.
EFF Report Warns: Mobile Ad Tools Quietly Push Apps to Share Where You Go
New research from the Electronic Frontier Foundation reveals how advertising software in mobile apps aggressively nudges users to surrender real-time location data, often without clear consent or understanding of where i…
What a DNS leak test really proves (and how to fix it)
Learn what a DNS leak test really proves, common causes of leaks, and how to fix them with encrypted, no-logs DNS like AEU DNS.
Set up private encrypted DNS on Android, Windows & router
Learn to set up private DNS on Android, Windows 11, and your router using encrypted DNS like AEU DNS for privacy.
DNS4EU vs NextDNS vs AEU DNS: which is truly no-logs?
Compare DNS4EU vs NextDNS vs AEU DNS: what no-logs really means, EU jurisdiction, and encrypted DNS options. Find the right resolver.
Block ads and trackers network-wide with DNS
Learn how to block ads and trackers network-wide with DNS in Europe, using encrypted, no-logs resolvers like AEU DNS.
The EU no-logs DNS to switch to after dns0.eu shut down
dns0.eu shut down in Oct 2025. Find the best EU no-logs DNS provider alternative with encrypted DNS and strict privacy.
Encrypted DNS for families: block adult content safely
Learn how encrypted DNS for families blocks adult content and enforces SafeSearch across all devices, with privacy and no logs.
DoH vs DoT vs DoQ: encrypted DNS explained
DoH vs DoT vs DoQ: encrypted DNS explained. Learn the differences, pros, cons, and which to choose for privacy and security.
Why Parts of the Internet Become Unreachable, And How Network Operators Can Spot It
New research redefines Internet connectivity, showing partial reachability is common and often mistaken for outages, with important lessons for DNS reliability and user privacy.
Inaccessible Apps Force Users to Surrender Financial Privacy
Digital services that ignore accessibility force people to give up sensitive financial data just to complete everyday tasks. Poor design undermines privacy, here’s what to do.
The Hidden Weakness in Website Security: How Missing Certificate Links Can Break Trust
A single missing digital certificate can trigger browser warnings and block access, even on legitimate sites. Here’s why the chain of trust matters and what you can do.
New Data Format Shrinks RPKI Archives, Boosting Long-Term Routing Security Research
A new compact data representation promises to make it much easier to store and analyze the huge volume of RPKI data that helps keep internet routing safe from hijackers.
Italy’s Clash with Netflix Over Content Delivery Rules Could Redefine Your Internet Freedom
A legal battle over how the web’s behind‑the‑scenes delivery networks are regulated in Italy may impact speed, access and openness for users everywhere.
No more unencrypted fallback: How HSTS-Enforced makes secure browsing the standard
A proposed web standard called HSTS-Enforced aims to fix a decades-old flaw by making encrypted HTTPS connections the default, eliminating the risk of stealthy downgrade attacks.
Could DNS Solve Internet Routing Security Flaws? Fresh Ideas from IETF 126
At IETF 126, researchers highlighted a DNS-based method called PAVA to validate BGP paths, potentially simplifying routing security and bringing DNSSEC to the forefront.
Why a Single DNS Lookup Can Trigger Hundreds of Hidden Queries
New research reveals how a single DNS request can explode into hundreds of queries, and what the IETF is doing to simplify the system while preserving security.