Collaborate Disseminate
I have a domain name under .money, which supports DNSSEC.
However, my registrar hasn’t done DNSSEC with this TLD before and is asking me to supply the Key Tag, Algorithm Type, Digest Type and Digest — and they will set them.
However, I am… Continue reading Supplying registrar with dnssec related records
Seven vulnerabilities affecting Dnsmasq, a caching DNS and DHCP server used in a variety of networking devices and Linux distributions, could be leveraged to mount DNS cache poisoning attack and/or to compromise vulnerable devices. “Some of the b… Continue reading Dnsmasq vulnerabilities open networking devices, Linux distros to DNS cache poisoning
DNSSEC security starts by first grouping DNS records (RR) of the same type into a record set (RRset) and then this RRset gets signed…
Does this mean that I have to completely define all the RR in my DNS prior to enabling DNSSEC? What wou… Continue reading What happens if I change RR on my domain’s DNS after DNSSEC has already been enabled?
DNSSEC security starts by first grouping DNS records (RR) of the same type into a record set (RRset) and then this RRset gets signed…
Does this mean that I have to completely define all the RR in my DNS prior to enabling DNSSEC? What wou… Continue reading What happens if I change RR on my domain’s DNS after DNSSEC has already been enabled?
Two separate groups of academics have recently released research papers based on research into the Domain Name System (DNS). One has found that the overwhelming majority of popular site operators haven’t learned from the 2016 Dyn/Mirai incident/a… Continue reading How prevalent is DNS spoofing? Could a repeat of the Dyn/Mirai DDoS attack have the same results?
Contents of government gazette, Linux distributions, Open Data, etc. are public, there are no constraints for "increase user privacy". On the contrary, we want to guarantee transparency… But all tutorials and explanations abou… Continue reading Can I simplify DNSSEC implementation in a context of public content?
I am confused about if I decided to implement DNS over TLS (DoT), would I lose DNSSEC?
Details:
I am connected with IPv4 + IPv6 Cloudflare DNS directly in my home OpenWrt router.
I love the idea of safer DNS, even if for home purposes, D… Continue reading Does Cloudflare’s DNS over TLS (DoT) implement DNSSEC too?
Instead of depending on secure application protocols such as HTTPS, SSH, SFTP,
Secure SMTP, DNS-Sec, etc., many corporate IT environments use TLS for
communication between the modules or systems of their enterprise applications,
specifical… Continue reading Why many IT corporate companies love TLS?
I’m interested in methods/solutions for blocking incoming and/or out-going WhatsApp requests and/or traffic on a personal home Google WiFi network.
I also have the Google WiFi app with manager/admin rights.
Thank you!
I’ve been looking into ways to detect a Man In the Middle attack, when the client has "duped" into trusting third party CA. Examples of this are, anti-virus applications and corporate firewalls who are now installing their own c… Continue reading Detecting a web based MITM attack?