DNS work at IETF 119
Re-gurgitating a post on LinkedIn about my DNS work at the recent IETF 119 meeting.
Posts by Category
work
Don’t Go Unsigned
At the ICANN 79 DNSSEC & Security Workshop, I gave a talk, with Eric Osterweil, on why you shouldn’t unsign your DNS zone during algorithm rollovers and...
Greasing DNS Extension Points
Mark Andrews (ISC) and I have published an initial version of a new Internet Draft on Greasing Protocol Extension Points in the DNS.
Automation of DNSSEC Provisioning and Maintenance
I was in Da Nang, Vietnam in September for the 41st DNS-OARC Workshop.
RFC 9471 published
DNS Glue Requirements in Referral Responses has just been published as RFC 9471. Co-authored with Mark Andrews, Paul Wouters, and Duane Wessels.
DNS-OARC talk on DNSSEC Experience
I just returned from the 40th DNS-OARC Workshop in Atlanta, Georgia, a small DNS focussed conference, run by DNS-OARC.
Invited Talk at University of Virginia
I was invited to give a talk at the University of Virginia’s ECE distinguished seminar series.
OARC Talk on DANE
I was in Philadelphia for the 38th DNS-OARC Workshop.
Multi-Signer DNSSEC at APNIC Blog
APNIC published my article on Multi-Signer DNSSEC Models today on their blog.
RFC 9102 Published (TLS DNSSEC Chain)
RFC 9102: “TLS DNSSEC Chain Extension”, was finally published as “experimental” – a few years after a long, acrimonious battle in the IETF TLS WG to get it p...
Swedish Internet Foundation on Multi-Signer
The Swedish Internet Foundation published an article yesterday, “Solving the decade old problem with Multi-Signer DNSSEC”, mentioning my work and collaborat...
ICANN70 DNSSEC Panel
Recording of the ICANN70 DNSSEC Panel, in which I participated.
RFC 8901 published
Multi-Signer DNSSEC Models has just been published as RFC 8901.
DANE library in Go
I’ve developed a DANE TLS authentication library in Go recently, which is available on Github:
Iterative DNS resolution testing tool
Since I’ve been trapped at home due to the pandemic and have more free time, I’ve recently enhanced my command line iterative DNS resolution testing tool, “r...
Delegation Revalidation by DNS Resolvers
I’ve been working recently on a new IETF draft document on Delegation Revalidation by DNS Resolvers, with collaborators Paul Vixie, CEO of Farsight Security,...
Multi-Signer DNSSEC Models approved as RFC
The Multi-Signer DNSSEC Models draft that I’ve been working on for the past couple of years, has been approved by the IESG (Internet Engineering Steering Gro...
NS1 Press Release on Multi-Signer DNSSEC
DNS Company, NS1 today issued a press release on their collaboration with Salesforce (my employer) on the specification and implementation of Multi-Signer DN...
APNIC DANE blog
APNIC invited me to write a guest article for their blog, elaborating on my ‘Whither DANE’ lighting talk at the DNS-OARC 30 workshop in May. It just went up ...
Whither DANE?
At the recent DNS-OARC workshop, I gave a short talk on current prospects for DANE adoption. This generated a fair amount of subsequent discusion and comment...
IETF102 and Montreal
I was in Montreal this month to attend IETF102 and several side meetings just before it.
Talks at Fall 2015 DNS-OARC Workshop
I attended the Fall 2015 DNS-OARC workshop in Montreal, Canada earlier this month. DNS-OARC is the “DNS Operations, Analysis, and Research Center”, and the p...
Qname Minimization talk
Qname Minimization @ DNS-OARC
Key Transparency for DNSSEC?
At the recent IETF meeting in Toronto, there was an interesting discussion in the trans working group on DNSSEC certificate transparency, and there is a (ver...
I’ve left Penn for a new job
After more than 20 years of working at Penn (University of Pennsylvania), I’ve decided to take a new job as Principal Research Scientist at Verisign Labs, th...
An IPv6 Success Story – Galois
The following article was contributed by Paul Heinlein, a systems administrator at Galois. Paul attended my full day IPv6 training course at USENIX LISA 2013...
EDU Top Level Domain statistics
Some DNS Top Level Domain (TLD) operators publish statistics about their DNS zones. Some others have a zone file access program that allows others to examine...
USENIX interviews - IPv6 and DNSSEC
I’m giving full day tutorials on IPv6 and DNSSEC at the upcoming USENIX LISA conference in Washington DC in November. Matt Simmons interviewed me about both ...
ISC DLV registry usage
On a LinkedIn forum, Dan York of the Internet Society recently asked a question about who still uses the ISC DNSSEC Lookaside Validation (DLV) registry. Whil...
DNS Amplification Attacks
There has been a lot of talk recently about DNS amplification attacks (with prominent news reports of high bandwidth attacks targeted at anti-spam services, ...
ISOC ION Panel - Advancing the Network
“I tend to think of IPv6 & DNSSEC both a little bit like global warming … something that is developing kind of slowly … they’re both inevitable, it’s a j...
Internet2 IPv6 Panel recap
A few notes from last month’s IPv6 deployment panel at the Fall Internet2 Member Meeting in Philadelphia, which I moderated (October 2nd 2012). Watch the ent...
DNSSEC and Certificates
DNSSEC is a system to verify the authenticity of DNS data using public key signatures. With increasing deployment of DNSSEC comes the possibility of applicat...
Stanford Linear Accelerator Tour
At the recent Joint Techs conference, our host Stanford University arranged a lunch time tour of the Stanford Linear Accelerator Center (SLAC) for a small gr...
A Look at World IPv6 Launch Traffic
The World IPv6 Launch website has compiled a set of measurements at http://www.worldipv6launch.org/measurements/. I’ll take a quick look at some of them here...
Network Engineer openings at Penn
We have two job openings at the University of Pennsylvania for Network Engineers.
A targeted survey of DNSSEC deployment
I’ve been working on a DNS and DNSSEC monitoring project, which is available at
IPv6 at Penn
World IPv6 Launch (June 6th 2012) is fast approaching, so I thought I’d share some details about IPv6 deployment at the University of Pennsylvania and what w...
Penn’s DNS Zone
Some data from a quick analysis of the contents of the University of Pennsylvania’s primary DNS zone (upenn.edu):
IPv6 and DNS Classes I’m Teaching
I’m teaching two half day classes on IPv6 and DNS/DNSSEC at the LOPSA PICC conference (Professional IT Community Conference), being held May 11-12, 2012 in N...
personal
Website Reboot
It’s finally time to redo my website a bit.
San Diego Trip
I was in San Diego for a few days. The first day I visited the San Diego zoo, widely considered to be one the best. The second day I rented a car and drove o...
Banff and Jasper Vacation
We visited Banff and Jasper National Parks in the Canadian Rockies earlier this month. It was unusually cool for this time of year, even for the Canadian Roc...
Volunteer Time at Spirit Open Equestrian
With work colleagues, I recently did some volunteering work at a local non-profit, Spirit Open Equestrian, which offers numerous healing programs involving t...
Around London with my brother
I’ve been in London for nearly a week and a half for the IETF 101 meeting, and stayed the weekend after to visit and catch up with my (many) relatives here. ...
Arecibo Observatory
I’m in Puerto Rico for the DNS-OARC Workshop and ICANN 61 meeting. Yesterday, with some conference friends, we visited the world famous Arecibo Observatory. ...
Website reboot
I’ve redone my website, something I’ve been planning to do for quite a while. I’m now using the Pelican static site generator. Over the next few days, I will...
Srimongol Village visit
We visited (completely unannounced) a small village in Srimongol, Bangladesh on this day. The locals (and especially the kids) were delighted to see us. And ...
Singapore Zoo
Photos from the Singapore Zoo, which I visited with some IETF100 colleagues, on Nov 17th 2017.
Photos from Rocky Mountains
We went on vacation earlier this month to visit two US National Parks renowned for their spectacular natural scenery: Rocky Mountain National Park in Colorad...
Photos from Mt Rainier National Park
We went on vacation earlier this month to visit national parks in Washington State.
Philadelphia Skyline Photos
My colleague Deke Kassabian posted an older photo of the Philly skyline (that I’d taken a number of years ago) on his Facebook page. So I thought I’d post a ...
A Start
A colleague on her office door, has a picture of a famous New Yorker cartoon, in which one dog says to another, “I had my own blog for a while, but I decided...