AI-generated image
Slow DNSSEC Uptake Highlights Need for Automation and a DNS Overhaul
A comment on DNSSEC automation reveals familiar friction: complex setup, low adoption, and calls to redesign the 1980s-era DNS. Industry best practices may hold the key.
AI-generated image
The Hidden Costs of Widespread DNS Blocking
Mandates that force internet providers to block domain names are on the rise, and the Internet Society warns this trend brings serious risks for security, openness and the global internet. Here is what it means for users…
AI-generated image
Why the Web's Certificate Revocation System Is Broken and What DNS Can Do Instead
The X.509 certificate revocation model relies on ambiguous 'regular' checks and overburdened OCSP infrastructure. New research shows how DNS and DNSSEC could offer a leaner, more private alternative.
AI-generated image
The Next DNS Root Key Roll Is Underway, and Adoption of the New Key Is Dangerously Low
APNIC measurements show fewer than 20% of users behind DNSSEC-validating resolvers have adopted KSK-2024, the incoming root key signing key, even though the roll is set for October 2026.
AI-generated image
Bangladesh's .bd Country Domain Moves From DNSSEC Workshop to Live Deployment
A reader asks about RDAP support, DNSSEC timing, and updating whois records after Bangladesh's .bd ccTLD moved from DNSSEC workshop to deployment.
AI-generated image
New IRTF Draft Maps Trust Anchors and Manufacturer-Installed Keys for Smarter Device Security
An IRTF draft now in its 14th iteration offers a taxonomy for understanding how trust is built into IoT devices, from factory-installed keys to the global DNSSEC trust anchor.
AI-generated image
NIST Revises Secure DNS Guide, Treating DNS as a Security and Resilience Control
New NIST guidance moves DNS from background infrastructure to an active security control, covering protective DNS, DNSSEC validation, encrypted protocols, and logging for operators.
AI-generated image
Hundreds of Queries for One Domain: The Hidden Work Behind a Cold Start DNS Lookup
A fresh look at what happens when a DNS resolver boots with an empty cache reveals why some names demand dozens or even hundreds of queries, and how resolver design balances speed against resilience.
AI-generated image
Is DNS Resolution Becoming Too Centralized? New Measurements Paint a Mixed Picture
A new APNIC analysis examines concentration in DNS name registration and resolution markets, revealing a fragmented registrar landscape but a potential concentration of recursive resolver usage.