• Thursday 5 April 2018 Knowledge bank

    PowerDNS Recursor version 4 supports DNSSEC validation

    With the launch of version 4, the PowerDNS Recursor now also supports DNSSEC validation. The new feature is currently still experimental, but the developers say it works well. “The underlying design philosophy is that legitimate look-ups shouldn't be refused, since that results in sites and services being unavailable to end users.” Validation by the Recursor has been on the agenda for some time, but has had to wait for refinement of the DNSSEC implementation on the PowerDNS authoritative server. Protection against DDoS/amplification attacks has also been a high priority in recent years, leading to development of the dnsdist load balancer, for example

    Afbeelding van PowerDNS Recursor version 4 supports DNSSEC validation
    Read more
  • Wednesday 11 April 2018 Knowledge bank

    EPP 'key relay': a structural solution for the DNSSEC transfer problem

    Autumn 2013 This summer, a structural solution for the transfer of DNSSEC-enabled domains became available. SIDN's EPP interface has been extended to support a new 'key relay' command, meaning that a domain can now be transferred without interrupting its secure status. What's more, the transaction can be fully automated. Registrars and software providers can incorporate the new functionality into their own dashboards and interfaces thus make it available to their own users. A significant obstacle to further DNSSEC adoption has therefore been removed.

    Afbeelding van EPP 'key relay': a structural solution for the DNSSEC transfer problem
    Read more
  • Tuesday 19 June 2018 Internet security

    Watch out for unscrupulous firms trying to sell you domain names at inflated prices

    Our advice: don't be rushed into agreeing a sale

    Afbeelding van Watch out for unscrupulous firms trying to sell you domain names at inflated prices
    Read more