2024-06-28
OpenDNS has made the decision to deny France and Portal service, rather than implement a poorly conceived court order to block a small number of domains in those countries.
OpenDNS has made the decision to deny France and Portal service, rather than implement a poorly conceived court order to block a small number of domains in those countries.
Verisign, the operator of the registries for the COM, NET, and EDU top level domains, is rolling the cryptographic algorithm used to DNSSEC sign all three of their registries.
I’ve seen more than a few questions on mailing lists and on chat servers about migrating DNSSEC-signed zones between different server software. These are the steps I used to migrate a number of signed zones to Knot from BIND.
The .org TLD has been DNSSEC signed! And I got to flip the switch.
It’s generally accepted in the DNS community that using a stateful load balancer in front of DNS servers is a bad idea. Here I present one alternative that doesn’t require running routing daemons on the servers themselves.