At the recent DNS-OARC workshop, I gave a short talk on current prospects for DANE adoption. This generated a fair amount of subsequent discusion and commentary, including a blog article by Geoff Huston, so I thought I’d elaborate in this post.

I was in San Diego for a few days. The first day I visited the San Diego zoo, widely considered to be one the best. The second day I rented a car and drove out to the Anza Borrego Desert State Park - I’ve been meaning to visit it forever, but finally did it. It was quite nice, and I was treated to a dazzling sunset just as I was heading back.

We visited Banff and Jasper National Parks in the Canadian Rockies earlier this month. It was unusually cool for this time of year, even for the Canadian Rockies, and we experienced a snow storm enroute to Jasper from Banff!

I was in Montreal this month to attend IETF102 and several side meetings just before it.

With work colleagues, I recently did some volunteering work at a local non-profit, Spirit Open Equestrian, which offers numerous healing programs involving therapeutic riding, equine assisted learning and psychotherapy programs. We learned about the program, how to take work with and take care of horses, and also spent some time doing field cleaning work. It was quite a fun day.

I’ve been in London for nearly a week and a half for the IETF 101 meeting, and stayed the weekend after to visit and catch up with my (many) relatives here. This Sunday (March 25th) I walked around London with my brother and his wife. A bit chilly and overcast, but we still had a great time. The London half marathon was in progress when we started out near St Paul’s Cathedral (where there was some sort of “Palm Sunday” thing going on too). Most of the day was spent wandering around London on foot visiting St Paul’s, Millenial bridge, Tate, the Shard, Burrough market, Tower Bridge, St Katherine’s Dock (where we had lunch at a Dumpling place), and misc East London buildings, including the Salesforce building. We parted ways at the Liverpool St station tube stop.

I’m in Puerto Rico for the DNS-OARC Workshop and ICANN 61 meeting. Yesterday, with some conference friends, we visited the world famous Arecibo Observatory. From it’s completion in 1963 until about mid-2016, it was the world’s largest radio telescope (at which time it was overtaken by the Aperture Spherical Telescope in China).

I’ve redone my website, something I’ve been planning to do for quite a while. I’m now using the Pelican static site generator. Over the next few days, I will also be pulling content from my old (and long neglected) blog hosted on Google’s blogger platform gradually back to this site.

We visited (completely unannounced) a small village in Srimongol, Bangladesh on this day. The locals (and especially the kids) were delighted to see us. And one of the young girls, Jasmin, even invited us into their family’s home to sit down with them for a bit.

Photos from the Singapore Zoo, which I visited with some IETF100 colleagues, on Nov 17th 2017.

We went on vacation earlier this month to visit two US National Parks renowned for their spectacular natural scenery: Rocky Mountain National Park in Colorado and Glacier National Park in Montana.

We went on vacation earlier this month to visit national parks in Washington State.

I attended the Fall 2015 DNS-OARC workshop in Montreal, Canada earlier this month. DNS-OARC is the “DNS Operations, Analysis, and Research Center”, and the premier venue for discussion and information sharing on DNS operations, protocol implementations, and research. As its website notes, DNS-OARC “brings together key operators, implementors, and researchers on a trusted platform so they can coordinate responses to attacks and other concerns, share information and learn together.”

At the recent IETF meeting in Toronto, there was an interesting discussion in the trans working group on DNSSEC certificate transparency, and there is a (very) preliminary IETF draft (that needs a lot more work):

After more than 20 years of working at Penn (University of Pennsylvania), I’ve decided to take a new job as Principal Research Scientist at Verisign Labs, the applied research division of Verisign Inc. You might know that Verisign is one of the world’s largest DNS infrastructure providers. It runs the .com, .net, .edu, and .gov DNS top level domains, two of the thirteen DNS root servers (A and J), and performs the critically important root zone management function. Verisign also provides managed DNS, Distributed Denial of Service (DDoS) mitigation, and several other services. (Note: Verisign’s certificate services business was sold off to Symantec several years ago).

The following article was contributed by Paul Heinlein, a systems administrator at Galois. Paul attended my full day IPv6 training course at USENIX LISA 2013 and just a couple of months later sent me a report of his successful deployment of IPv6. So I asked if he’d like to contribute an article on the topic.

Some DNS Top Level Domain (TLD) operators publish statistics about their DNS zones. Some others have a zone file access program that allows others to examine their data and publish statistics. Frederic Cambus (@fcambus on Twitter) maintains a site called statdns ( http://www.statdns.com/ ) that keeps statistics for several of the TLDs.

I’m giving full day tutorials on IPv6 and DNSSEC at the upcoming USENIX LISA conference in Washington DC in November. Matt Simmons interviewed me about both and you can read the transcripts on the USENIX website:

On a LinkedIn forum, Dan York of the Internet Society recently asked a question about who still uses the ISC DNSSEC Lookaside Validation (DLV) registry. While commenting on the discussion, I decided to take a look at the contents of the registry, and I’m sharing some of my findings in this article.