Cloudflare 1.1.1.1 Now Supports Post-Quantum DNSSEC
Cloudflare's 1.1.1.1 resolver now validates DNSSEC with the post-quantum ML-DSA-44 algorithm, keeping DNS authentication secure against future quantum computers…
Self-Hosted DNS Outages Show Tested Redundancy Is Critical
George Michaelson's self-hosted DNS outage at home shows why redundancy must be designed and tested, not just bought with hardware.
AI surfaces 27-year-old OpenBSD TCP SACK bug
Anthropic's Mythos agent found a 27-year-old bug in OpenBSD's TCP SACK code, showing AI-driven vulnerability discovery can outpace patch cycles.
DNS Synchronization: Full Copies, rsync and Merkle Trees
Geoff Huston explains the synchronization methods that keep DNS and RPKI data consistent, from full copies and rsync to deltas and Merkle trees.
DNS cold start: how resolvers bootstrap from an empty cache
APNIC's Geoff Huston and George Michaelson explain the circular dependency when a DNS resolver cache is empty and why it matters for query load.
Local copies of the DNS root zone can spike resolver traffic, researchers find
Measurements by Ilyas Rahimi and Willem Toorop show that locally serving the DNS root zone can create more network traffic than it saves in some setups, while also identifying an Unbound bug.
APNIC Labs: DNS clients refuse to take NXDOMAIN for an answer, sending 4.4 queries per name
New 2026 measurements show an average of 4.4 DNS queries for every nonexistent domain name, up from 2.4 in 2019, as clients and resolvers appear unwilling to accept a clear negative response.
Four classes of routing attack still escaping validation, new survey warns
A new survey maps eight attack types across four macro-categories, showing origin validation covers only one while IPv6 deaggregation and attribute-based resets remain unchecked.
How a time server glitch took down Australia's Telstra and halted trains
A misaligned time server caused a nationwide outage for Australian telecom Telstra, showing that accurate time synchronization is critical infrastructure many overlook.