Author Archive for Dan York

DNSSEC and DANE Activities at ICANN 58 in Copenhagen, March 12-15, 2017

ICANN 58 Logo

Next week in Copenhagen, Denmark, ICANN 58 will include some great technical info about DNSSEC and DANE happening in several sessions. Here is the plan… All times below are Central European Time (CET), which is UTC+1. DNSSEC For Everybody: A Beginner’s Guide – Sunday, 12 March On Sunday, March 12, 2017, we’ll have the “DNSSEC For Everybody: A Beginner’s Guide” session that Read more…

March 6th, 2017 by | Posted in DANE, DNSSEC, Events | Tags: , , , | No Comments

Comments? Internet Draft on DNSSEC Crypto Algorithm Agility

DNSSEC badge

What are the challenges in deploying new cryptographic algorithms for DNSSEC? As we look to move to using new crypto algorithms such as ECDSA, what are the barriers to getting those new algorithms rolled out? And how can we overcome those barriers? A few of us wrote an Internet Draft on this topic: draft-york-dnsop-deploying-dnssec-crypto-algs and Read more…

March 3rd, 2017 by | Posted in DNSSEC, IETF | No Comments

Watch Live Today! DNS Privacy Workshop Streaming from NDSS 2017


Want to learn the latest about DNS privacy? About the latest research and techniques to protect the confidentiality of your DNS info and queries? Starting at 8:55 am PST (UTC-8) today, there will be what looks to be an outstanding workshop on DNS Privacy streaming live out of the Network and Distributed System Security Symposium (NDSS) in Read more…

February 26th, 2017 by | Posted in Events, TLS for Applications | Tags: , , , | No Comments

Free webinar on DNS/Internet security – Thursday, 19 January, 18:00 UTC

ISC2 Logo

Want to learn more about DNS security and the broader topic of Internet security? This Thursday, 19 January 2017, I will be speaking as part of a free webinar on the topic of “Visibility and Security – Two Sides of the Same Coin“.  The panel will include: Cricket Liu, Executive VP, Infoblox Dave Lewis, Global Read more…

January 16th, 2017 by | Posted in DNSSEC | Tags: | No Comments

New report: “State of DNSSEC Deployment 2016”

State of DNSSEC Deployment 2016

What is the current state of deployment of the DNS Security Extensions? (DNSSEC) How many domains are secured with DNSSEC? What actual usage are we seeing on the Internet? What software is available to help? For years there have been many statistics about DNSSEC available, but it’s been hard to get an overall picture of Read more…

January 4th, 2017 by | Posted in DANE, DNSSEC, Reports | Tags: , | No Comments

Call for Participation – ICANN DNSSEC Workshop at ICANN58 in Copenhagen

ICANN 58 Logo

Do you have new information about DNSSEC or DANE that you would like to share with the wider community? Have you created a new tool or service? Have you found a way to use DNSSEC to secure some other service? Do you have new statistics about the growth or usage of DNSSEC, DANE or other Read more…

December 12th, 2016 by | Posted in DNSSEC, Events | Tags: , , | No Comments

Over 50% of .CZ domains now signed with DNSSEC!

CZ domain statistics

Congrats to the team at CZ.NIC and to Internet users within the Czech Republic – the number of .CZ domains signed with DNSSEC just passed over the 50% mark! It’s great to see so many businesses, organizations and individuals using .CZ domains now receiving the higher level of trust that comes with DNSSEC signatures. CZ.NIC’s Ondrej Read more…

December 6th, 2016 by | Posted in DNSSEC, Statistics | Tags: , | No Comments

IAB Warns That All Networking Standards Need To Fully Support IPv6


This week the Internet Architecture Board (IAB) issued a strong statement warning that any networking standards developed by Standards Development Organizations (SDOs) need to fully support IPv6. The Internet Engineering Task Force (IETF) is of course the major SDO developing networking standards for the Internet, but many other standards organizations base their standards on IETF standards.  For instance, any Read more…

November 10th, 2016 by | Posted in IPv6 | Tags: , | No Comments

What would you like to see in a “State of DNSSEC Deployment 2016” report?

DNSSEC badge

What information would you like to see in a “State of DNSSEC Deployment 2016” report?  We’ve begun work on such a report with the idea of capturing all the various DNSSEC statistics at a specific moment in time. Pulling them all together into one document – one place where we can see it all.  The Read more…

November 4th, 2016 by | Posted in DNSSEC | Tags: | No Comments

DNSSEC and DANE Activities at ICANN 57 in Hyderabad, India, November 4-7, 2016

ICANN 57 Hyderabad logo

Friday marks the beginning of the ICANN 57 meeting in Hyderabad, India. As per usual there will be a range of activities related to DNSSEC or DANE. Two of the sessions will be streamed live and will be recorded for later viewing.  Here is what is happening. All times below are India Standard Time (IST), which is UTC+05:30. Read more…

November 3rd, 2016 by | Posted in DANE, DNSSEC, Events | Tags: , , , | No Comments