NEWS

The peculiar case of NSEC processing using expanded wildcard records

We discovered a vulnerability in the processing of wildcard synthesized NSEC records. The result was Unbound, Google public DNS, PowerDNS and Dnsmasq contained a flaw that made it possible to...

Bringing DNS Security and Privacy to the End User

How the getdns API project helps to achieve the goal of DNSSEC validation and DANE authentication at the end-points. Related links: Blog post

Unbound 1.6.8 released

Unbound 1.6.8 fixes CVE-2017-15105: vulnerability in the processing of wildcard synthesized NSEC records. Related links: Unbound project page Direct Download Changes

NSD 4.1.19 released

This release fixes IPv6 for the notify sending feature from 4.1.18. Related links: NSD project page Direct Download

DNSSEC trigger 0.15

This release fixes failure to start on OSX and Windows. Related links: DNSSEC trigger project page source install exe install dmg Changes

NSD 4.1.18 released

This release has features for saving memory and faster notification.With --enable-packed, 33% memory savings could be had, or somethingalong that size. Notification of secondary servers happens in...

Privacy: Using DNS-over-TLS with the new Quad9 DNS Service

Hands-on install & configure of getdns and stubby to use DNS-over-TLS with Quad9 DNS service. Related links: Blog post

Net::DNS 1.13 released

IDNA queries with Net::LibIDNS2 Related links: Net::DNS 1.13 release announcement Project website Direct Download Changes

DNSSEC trigger 0.14

This release fixes install problems on OSX Sierra and High Sierra. The binary packages bundle the just-released unbound 1.6.7 that sends telemetry data about the root trust anchor. Related links:...