ARTICLES TAGGED PUBLICATION

Defending against DNS reflection amplification attacks

Measurements and analysis of defense mechanisms against DNS reflection and amplification attacks. Related links: PDF

RFC6781: DNSSEC Operational Practices, Version 2

An updated set of practices for operating the DNS with security extensions (DNSSEC). Related links: RFC6781

Resilient OpenDNSSEC (MSc. thesis)

This thesis analyses error situations in securing DNS zones with OpenDNSSEC. Recommendations are presented to increase the resilience level that OpenDNSSEC can offer against such situations....

Discovering Path MTU black holes on the Internet using RIPE Atlas (MSc. thesis)

Measurement and analysis of Path MTU black holes due to ICMP and packet fragment filtering on the Internet. Related links: PDF

RFC 6605: ECDSA for DNSSEC

This document describes how to specify Elliptic Curve DigitalSignature Algorithm (DSA) keys and signatures in DNS Security(DNSSEC). Related links: RFC6605

RFC6635: RFC Editor Model (2)

This document describes the the RFC Series functions: the RFC Series Editor,the RFC Production Center, and the RFC Publisher. Related links: RFC6635

RFC6672: DNAME redirection in the DNS

The DNAME record provides redirection for a subtree of the domainname tree in the DNS. Related links: RFC6672

NLnet Labs Annual Report 2011

We are happy to present NLnet Labs Annual report 2011. It is intended to present an overview of Labs' various activities to those who support NLnet Labs financially, through grants or support...

Flexible and Robust Key Rollover in DNSSEC

Paper describing the OpenDNSSEC Enforcer NG design, presented at SATIN 2012. Related links: PDF