NEWS

The peculiar case of NSEC processing using expanded wildcard records

We discovered a vulnerability in the processing of wildcard synthesized NSEC records. The result was Unbound, Google public DNS, PowerDNS and Dnsmasq contained a flaw that made it possible to...

Bringing DNS Security and Privacy to the End User

How the getdns API project helps to achieve the goal of DNSSEC validation and DANE authentication at the end-points.

Unbound 1.6.8 released

Unbound 1.6.8 fixes CVE-2017-15105: vulnerability in the processing of wildcard synthesized NSEC records.

NSD 4.1.19 released

This release fixes IPv6 for the notify sending feature from 4.1.18.

DNSSEC trigger 0.15

This release fixes failure to start on OSX and Windows.

NSD 4.1.18 released

This release has features for saving memory and faster notification.With --enable-packed, 33% memory savings could be had, or somethingalong that size. Notification of secondary servers happens in...

Privacy: Using DNS-over-TLS with the new Quad9 DNS Service

Hands-on install & configure of getdns and stubby to use DNS-over-TLS with Quad9 DNS service.

Net::DNS 1.13 released

IDNA queries with Net::LibIDNS2

DNSSEC trigger 0.14

This release fixes install problems on OSX Sierra and High Sierra. The binary packages bundle the just-released unbound 1.6.7 that sends telemetry data about the root trust anchor.