NRW.social

3 Beiträge3 Beteiligte0 Beiträge heute

ϺΛDИVTTΛHVersion 1.23.0-0 of our <a href="https://fosstodon.org/tags/unbound" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#unbound</a> docker image was released by madnuttah-bot yesterday! 💚<a href="https://fosstodon.org/tags/OpenSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSSL</a> has been updated to 3.5.0 after testing in the <a href="https://fosstodon.org/tags/canary" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#canary</a> image, too.<a href="https://github.com/madnuttah/unbound-docker" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/madnuttah/unbound-docker</a><a href="https://hub.docker.com/r/madnuttah/unbound" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hub.docker.com/r/madnuttah/unbound</a><a href="https://fosstodon.org/@nlnetlabs" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@nlnetlabs</a> <a href="https://fosstodon.org/tags/foss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#foss</a> <a href="https://fosstodon.org/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://fosstodon.org/tags/selfhosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosting</a> # homelab <a href="https://fosstodon.org/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://fosstodon.org/tags/dnssec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dnssec</a>

John ShaftYay, Finland goes elliptic after a week or so of insecurity<a href="https://mastodns.net/@diffroot/114383836309131015" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://mastodns.net/@diffroot/114383836309131015</a><a href="https://piaille.fr/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a>

JP MensFI. is almost there ... :-) <a href="https://mastodon.social/tags/dnssec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dnssec</a>

Stéphane BortzmeyerOn an <a href="https://mastodon.gougere.fr/tags/IETF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IETF</a> mailing list, about an excellent property of data security (as opposed to channel security): "you can pick up your <a href="https://mastodon.gougere.fr/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> answer from the street and still validate it".

John KristoffNIST SP-800-81: Secure Domain Name System (DNS) Deployment Guide initial public draft open for public comments.<a href="https://csrc.nist.gov/pubs/sp/800/81/r3/ipd" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://csrc.nist.gov/pubs/sp/800/81/r3/ipd</a><a href="https://infosec.exchange/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> <a href="https://infosec.exchange/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> <a href="https://infosec.exchange/tags/NIST" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NIST</a>

Stéphane Bortzmeyer<a href="https://mastodon.gougere.fr/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> Apple is moving from the old RSA with SHA-1 to ECDSA for its TLD <a href="https://dnsviz.net/d/apple/Z_jGvA/dnssec/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://dnsviz.net/d/apple/Z_jGvA/dnssec/</a>

PowerDNSPowerDNS Recursor 5.0.10, 5.1.4 and 5.2.2 Released <a href="https://blog.powerdns.com/2024/04/09/powerdns-recursor-5-0-10-5-1-4-5-2-2-released" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.powerdns.com/2024/04/09/powerdns-recursor-5-0-10-5-1-4-5-2-2-released</a> <a href="https://fosstodon.org/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://fosstodon.org/tags/dnssec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dnssec</a>

Neustradamus :xmpp: :linux:<a href="https://mastodon.social/tags/Dnsmasq" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Dnsmasq</a> 2.91 has been released (<a href="https://mastodon.social/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> / <a href="https://mastodon.social/tags/AAAA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AAAA</a> / <a href="https://mastodon.social/tags/CNAME" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CNAME</a> / <a href="https://mastodon.social/tags/PTR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PTR</a> / <a href="https://mastodon.social/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> / <a href="https://mastodon.social/tags/DHCP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DHCP</a> / <a href="https://mastodon.social/tags/DHCPv4" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DHCPv4</a> / <a href="https://mastodon.social/tags/DHCPv6" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DHCPv6</a> / <a href="https://mastodon.social/tags/BOOTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BOOTP</a> / <a href="https://mastodon.social/tags/TFTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TFTP</a> / <a href="https://mastodon.social/tags/PXE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PXE</a>) <a href="https://thekelleys.org.uk/dnsmasq/doc.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://thekelleys.org.uk/dnsmasq/doc.html</a>

PowerDNSPowerDNS Recursor Security Advisory 2025-01 (aka PowerDNS Recursor 5.2.1 Released) <a href="https://blog.powerdns.com/2025/04/07/powerdns-recursor-5-2-1-released" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.powerdns.com/2025/04/07/powerdns-recursor-5-2-1-released</a> <a href="https://fosstodon.org/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://fosstodon.org/tags/dnssec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dnssec</a>

Stéphane Bortzmeyer223.5.5.5 (AliDNS) seems to be one of the few big public <a href="https://mastodon.gougere.fr/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> resolvers without <a href="https://mastodon.gougere.fr/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> validation. Anyone to talk to Xi Jiping about this issue?

AntonHat hier wer Connections zur IT-Abteilung von aok.de? Die haben gestern das SSL-Zertifikat ihres mx1.aok.de getauscht, aber den TLSA-Record für DANE übersehen...<a href="https://dane.sys4.de/smtp/service.bw.aok.de" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://dane.sys4.de/smtp/service.bw.aok.de</a>20:00 Uhr: geht wieder! Danke :)<a href="https://mastodon.social/tags/DANE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DANE</a> <a href="https://mastodon.social/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> <a href="https://mastodon.social/tags/TLS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TLS</a> <a href="https://mastodon.social/tags/aok" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#aok</a>

John Shafttl;dr : - env. 4 215 000 domaines enregistrés dans .fr au 31 décembre 2024 - 19,8% des domaines signés avec <a href="https://piaille.fr/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> (≈ 835 000). Chiffre pudiquement qualifié de « modeste ». - 31646 <a href="https://piaille.fr/tags/IDN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IDN</a> enregistrés, soit ≈ 0,75% du total. Ridiculement bas« Bilan du .fr en 2024 : plus de 800 000 nouveaux noms enregistrés » <a href="https://www.afnic.fr/observatoire-ressources/actualites/bilan-du-fr-en-2024-plus-de-800-000-nouveaux-noms-enregistres/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.afnic.fr/observatoire-ressources/actualites/bilan-du-fr-en-2024-plus-de-800-000-nouveaux-noms-enregistres/</a>

Jan Schaumann"Nope: Strengthening Domain Authentication with Succinct Proofs"<a href="https://nope-tools.org/nope.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://nope-tools.org/nope.pdf</a>Basically: domain owner <a href="https://mstdn.social/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> signs their name, then encodes a proof of that DNSSEC chain into a new domain name, stashes that in a SAN in the cert and wants the client to verify the proof against... the root ZSK? Which it fetches via DoH from Google DNS, but... doesn't verify?Not sure I get it.<a href="https://mstdn.social/tags/realworldcrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#realworldcrypto</a> <a href="https://mstdn.social/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a>

Jan SchaumannPost-Quantum <a href="https://mstdn.social/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> Testbed with BIND and PowerDNS <a href="https://pq-dnssec.dedyn.io/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://pq-dnssec.dedyn.io/</a><a href="https://mstdn.social/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://mstdn.social/tags/RealWorldCrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RealWorldCrypto</a> <a href="https://mstdn.social/tags/pqc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pqc</a>

gregR ☯<a href="https://mastodon.gougere.fr/@bortzmeyer" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bortzmeyer</a> le principal intérêt de <a href="https://mamot.fr/tags/dnssec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dnssec</a> <a href="https://www.bortzmeyer.org/dns-afrinic-stale.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bortzmeyer.org/dns-afrinic-stale.html</a> Mais vous le connaissez :) Le reste <a href="https://ianix.com/pub/dnssec-outages.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ianix.com/pub/dnssec-outages.html</a> Avec un petit faible pour Slack <a href="https://lists.dns-oarc.net/pipermail/dns-operations/2021-September/021340.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://lists.dns-oarc.net/pipermail/dns-operations/2021-September/021340.html</a>

Stéphane BortzmeyerFormation <a href="https://mastodon.gougere.fr/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> toute la semaine prochaine. Si vous avez des exemples de trucs DNSSEC rigolos (par exemple des erreurs de configuration, ou au contraire des déploiements réussis), c'est le moment de les citer.

ChaCha20Poly1305@bortzmeyer@mastodon.gouger Aurais-tu des conseils pour fournir une zone DNS via un script Python/Perl qui génère des enregistrements à la volée (sans les stocker) et faire du <a href="https://mastodon.libre-entreprise.com/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a> dessus ? Je bataille avec PowerDNS.

PowerDNSFirst alpha release of PowerDNS DNSdist 2.0.0 <a href="https://blog.powerdns.com/2025/03/18/first-alpha-release-of-powerdns-dnsdist-2.0.0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.powerdns.com/2025/03/18/first-alpha-release-of-powerdns-dnsdist-2.0.0</a> <a href="https://fosstodon.org/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://fosstodon.org/tags/dnssec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dnssec</a>

IPFire NewsIPFire protects your DNS requests from being forged by using <a href="https://social.ipfire.org/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a>

Jan SchaumannSystem AdministrationWeek 7, The Domain Name System, Part IIIIn this video, we try to wrap up our discussion of the Domain Name System by addressing the nature of the root nameservers, looking at various different resource record types, observing reverse lookups, and thinking about how we can have assurance of authenticity and integrity of the <a href="https://mstdn.social/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> results returned to us via <a href="https://mstdn.social/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNSSEC</a>.<a href="https://youtu.be/XDJEJFVNoko" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://youtu.be/XDJEJFVNoko</a><a href="https://mstdn.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SysAdmin</a> <a href="https://mstdn.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevOps</a> <a href="https://mstdn.social/tags/SRE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SRE</a>

Frühere Suchanfragen

Suchoptionen

Verwaltet von:

Serverstatistik:

#dnssec