Hackernews posts about DNSSEC
DNSSEC is a cryptographic protocol that authenticates and secures DNS (Domain Name System) transactions by digitally signing DNS data to prevent spoofing and tampering.
- Upcoming changes to the DNSSEC root trust anchor (lists.dns-oarc.net)
- Dissecting M8trix (tilde.town)
- DNSSEC KSK rollover breaks DNS resolution for .nz domains (status.internetnz.nz)
- Just one bad packet can bring down a vulnerable DNS server thanks to DNSSEC (www.theregister.com)
- Calling time on DNSSEC: The costs exceed the benefits (www.mattb.nz)
- Russian TLD .RU fails DNSSEC validation (dnsviz.net)
- DNSSEC failures are how you get people to disable DNSSEC (utcc.utoronto.ca)
- Calling Time on DNSSEC? (www.potaroo.net)
- For DNSSEC and Why DANE Is Needed (blog.technitium.com)
- Calling Time on DNSSEC? (blog.apnic.net)
- The DNSSEC Root Signing Ceremony (www.cloudflare.com)
- Row breaks out over true severity of two DNSSEC flaws (www.theregister.com)
- Zone Dumping via DNSSEC (harrisonm.com)
- Just one bad packet can bring down a vulnerable DNS server thanks to DNSSEC (www.theregister.com)
- For DNSSEC and Why Dane Is Needed (blog.technitium.com)
- Migrating to BIND9 DNSSEC-Policy (dotat.at)
- Keytrap DNSSEC Attack (labs.ripe.net)
- Where did DNSSEC go wrong? (blog.apnic.net)
- Putting DNSSEC signers to the test: Knot vs. Bind (blog.apnic.net)
- BIND9 DNSSEC-Policy (dotat.at)
- Remediating new DNSSEC resource exhaustion vulnerabilities (blog.cloudflare.com)
- Is DNSSEC Worth It? (blog.apnic.net)
- Calling Time on DNSSEC? (blog.apnic.net)
- Fundamental design flaw in DNSSEC discovered (www.athene-center.de)
- Calling time on DNSSEC: The costs exceed the benefits (www.mattb.nz)
- DNSSEC Adoption Falls in 2024 (indieweb.social)
- How DNSSEC Works (howdnssec.works)
- Remediating new DNSSEC resource exhaustion vulnerabilities (blog.cloudflare.com)