Mastodawn

Cascade: a Friendly DNSSEC Signer

Arya Khanna (#NLnetLabs) unveils Cascade—the next-generation signer replacing OpenDNSSEC after 20+ years of service.

The ICANN Security and Stability Advisory Committee has just released a report, explaining that the DNS relies heavily on open source software. This report was written as a backgrounder for policy makers who may not know much about the DNS, or about Open Source. Several of us from open source DNS projects contributed, as did several experienced DNS operators and researchers. The report is here: https://itp.cdn.icann.org/en/files/security-and-stability-advisory-committee-ssac-reports/sac132-25-09-2025-en.pdf

#nlnetlabs #powerdns #dns

ISC.org Apr 1, 2025

This is adorable!

From our friends at #NLnetLabs ... get a bound version of the phone book of the Internet.

https://nlnetlabs.nl/news/2025/Apr/01/phonebook-of-the-internet/ #dns

News - The Phone Book of the Internet

A handy booklet with the domain names and IP addresses you need, to keep everything working even when the DNS doesn't.

NLnet Labs

Petr Menšík

Apr 25, 2024

Package full of #nlnetlabs stickers and coasters has arrived. My drinking set is almost complete.

Max Resing Jan 26, 2024

For the #rustlang advocates out there:

#nlnetlabs shared their great vision of working towards seemless integration between #DNS and network connectivity. Their aim: A single function call, that incorporates all the heavy lifting of DNS, TCP/IP, UDP/IP and the #TLS handshake.

https://blog.nlnetlabs.nl/the-next-five-years-of-dns-at-nlnet-labs/

The Next Five Years of DNS at NLnet Labs

In the last 25 years we have delivered on our mission to make DNS more dependable and trustworthy. These are our plans for the next five years.

The NLnet Labs Blog

Show thread

Max Resing Oct 2, 2023

@jelu - grand, thanks for the clarification. Given the fact that #unbound and #nlnetlabs tend to deliver solid quality, I believe it must be my gut feeling or the #DNSTAP collector.

By any chance, can you recommend some collector to for file-based archiving? I am using the GoLang-dnstap, but I would rather have a service that periodically logrotates the output files.

GitHub - dnstap/golang-dnstap: flexible, structured event replication format for DNS servers (command-line tool and Golang package)

flexible, structured event replication format for DNS servers (command-line tool and Golang package) - GitHub - dnstap/golang-dnstap: flexible, structured event replication format for DNS servers (...

GitHub

ADMIN magazine Apr 20, 2023

Learn how the @EU_Commission Cyber Resilience Act could impact open source projects https://www.admin-magazine.com/News/Cyber-Resilience-Act-Poses-Risk-to-Open-Source-Projects #OpenSource #Python #EclipseFoundation #NLnetLabs #security #CRA

Cyber Resilience Act Poses Risk to Open Source... » ADMIN Magazine

The Python Software Foundation (PSF) has issued a statement warning of potential impact of the proposed Cyber Resilience Act (CRA) on open source c...

ADMIN Magazine

Stéphane Bortzmeyer Jul 25, 2017

Checking outbound #SMTP over #TLS connections from my mail server. Authentified with #DANE for the domains of #IETF, #ISC, #PSG, #NLnetLabs… and #Comcast ('dig TLSA _25._tcp.mx1.comcast.net')