Geoff Huston at APNIC Labs published today a fascinating and very well-documented exploration of why he was having occasional seemingly random problems sending email from his Apple Mail program via APNIC’s Microsoft Exchange Server. It’s such a good read that I’ll not spoil the story, other than to say it is a good example of the Read more…

Do you have an open source project (or the idea for one) related to DNSSEC that needs funding? Perhaps a new tool that will make it easier to use DNSSEC?  Or perhaps new software that supports the DANE protocol to increase the security of TLS/SSL? A browser plugin?  A program that makes it easier for Read more…

The FreeBSD Foundation posted this week about the completion of a “IPv6 Performance Analysis Project” that had as its main goal closing the gap between IPv4 and IPv6 in terms of performance. Bjoern Zeeb was awarded a grant to perform this work earlier this year and has maintained a “Benchmarking and results” page showing his Read more…

What is the status of IPv6 support in free / open source operating systems? Recently Olle Johansson gave a presentation in Sweden where he provided, in his own words: A status report from a brief test of IPv6 support (including DHCPv6 and SLAAC) in OpenBSD, FreeBSD, Debian, Ubuntu, Fedora compared with Windows 7 and OS/X Read more…

Given that modern websites often pull content from a variety of different sites to build a single page, what impact does that have on DNSSEC and providing the security that it does? That was one of the questions raised in a recent post by the DNSSEC Deployment Initiative titled “Are You Secure?” This key point Read more…

The goal of the DNSSEC-Tools Project is “to create a set of software tools, patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC related technologies.” The project website is at: http://www.dnssec-tools.org/ There you will find information about the available tools, tutorials, installation information and of course the actual DNSSEC tools available Read more…

Want to add DNSSEC validation to your application? Looking for a weekend hacking project? Or a developer library to help speed up your work? If so, take a look at our list of DNSSEC developer libraries we recently compiled. Currently we’ve listed libraries/modules for: C Erlang Go Java Perl Python Ruby And we’re always on Read more…

At the current time we are aware of the following libraries for developers seeking to add DNSSEC support to their applications: C ldns from NLnet Labs libval from the DNSSEC-Tools Project libunbound, a component of the Unbound DNS resolver that can be used in other applications Erlang dns_erlang Go godns Java dnsjava DNSSEC4J (based on the DNSSEC Read more…