Mastodawn

Weekend Reads

* Secure DNS deployment guide
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-81r3.pdf
* Domain name renewals across ccTLDs
https://www.sidnlabs.nl/en/news-and-blogs/analysing-domain-name-renewals-across-cctlds
* Exposed API credentials on the web
https://arxiv.org/abs/2603.12498
* Russia increasingly disconnecting Internet
https://www.politico.com/news/2026/03/14/russias-self-inflicted-communication-crisis-00827197
* NIST 5G cybersecurity series papers
https://www.nccoe.nist.gov/5g-cybersecurity

#DNS #DNSSEC #Privacy #Russia #5G

Dataplane.org 5d ago

The Internet Last Week

* ICANN 85
https://meetings.icann.org/en/meetings/icann85/
* DNS rd signals spike
https://dataplane.org/statistics/dnsrd.html
https://dataplane.org/statistics/dnsrdany.html
* .uk TLD IPv6 TCP service degradation
https://dnsmon.ripe.net/uk?start=2026-03-08T00:00:00.000Z&end=2026-03-14T23:59:00.000Z&zone=uk.&protocol=tcp&ipVersion=6
* Russia censorship test Internet shutdown
https://apnews.com/article/russia-internet-outage-cellphone-app-disruptions-1792cfb177c26682efdb8046e0f9b063
https://www.wsj.com/world/russia/russia-shuts-off-internet-in-moscow-as-it-tests-nationwide-censorship-system-3b44c0af?st=HNUJ1k
* Law Enforcement disrupts SocksEscort network
https://www.europol.europa.eu/media-press/newsroom/news/europol-and-international-partners-disrupt-socksescort-proxy-service
https://www.justice.gov/usao-edca/pr/authorities-dismantle-global-malicious-proxy-service-deployed-malware-and-defrauded

#ICANN85 #DNS #UK #Russia #Proxies #Outages

ICANN85 Mumbai Community Forum | ICANN Public Meetings

Stay Informed and Engaged with the ICANN85 Community Forum in Mumbai – Learn about how to attend and register at the Official ICANN Meetings Site.

Dataplane.org Mar 14

John Kristoff Mar 13

Weekend Reads

* Post-quantum RPKI framework
https://arxiv.org/abs/2603.06968
* DNSSEC negative trust anchors
https://quad9.net/news/blog/dnssec-ntas-no-good-compromises/
* AS112 deployment characteristics
https://0x03c0.com/files/pam26-as112-camera-ready-with-notice.pdf
* Geoff Huston on Internet timekeeping
https://www.potaroo.net/ispcol/2026-03/nts.html
* Measuring IX route servers prefix coverage
https://blog.benjojo.co.uk/post/how-far-can-you-get-with-ix-route-servers

#RPKI #DNSSEC #DNS #NTP #BGP

pqRPKI: A Practical RPKI Architecture for the Post-Quantum Era

The Resource Public Key Infrastructure (RPKI) secures Internet routing by binding IP prefixes to authorized Autonomous Systems, yet its RSA foundations are vulnerable to quantum adversaries. A naive swap to post-quantum (PQ) signatures (eg Falcon) is a poor fit for RPKI's bulk model: every relying party (RP) repeatedly fetches and validates the entire global repository, so larger keys and signatures inflate bandwidth and CPU cost, especially during a long dual-stack transition. We present pqRPKI , a post-quantum RPKI framework that pairs a multi-layer Merkle Tree Ladder (MTL) with RPKI objects, customized to relocate per-object verification material from certificates into the Manifest. To update RPKI for Merkle tree based schemes, pqRPKI redesign the RPKI manifest and delegation chain, introduces a ladder-guided sync and bulk-verification workflow that lets validators localize diffs top-down and rebuild trees bottom-up. pqRPKI also preserves current RPKI objects and encodings, supports both hosted and delegated operation, and provides an additive migration path that coexists with today's trust anchors for dual-stack deployment with little size overhead. Implemented as a working publication point (PP) and RPs, we show that pqRPKI reduces repository footprint to 546.8 MB on average (65.5%/83.1% smaller than Falcon/ML-DSA), cuts full-cycle validation to 102.7 s, and achieves 118.3 s end-to-end PP to Router time, enabling sub-2-minute operating cadences with full-repository validation each cycle. Dual-stack deployment with RSA only adds just 3.4% size overhead versus today's RPKI repositories.

arXiv.org

Dataplane.org Mar 8

The Internet Last Week

* Amazon AWS drone strike effects
https://health.aws.amazon.com/health/status?eventID=arn:aws:health:me-south-1::event/MULTIPLE_SERVICES/AWS_MULTIPLE_SERVICES_OPERATIONAL_ISSUE/AWS_MULTIPLE_SERVICES_OPERATIONAL_ISSUE_E6426_01AD72B4E1E
https://health.aws.amazon.com/health/status?eventID=arn:aws:health:me-central-1::event/MULTIPLE_SERVICES/AWS_MULTIPLE_SERVICES_OPERATIONAL_ISSUE/AWS_MULTIPLE_SERVICES_OPERATIONAL_ISSUE_5E6B8_EF2498889B5
https://lists.outages.org/archives/list/[email protected]/thread/GL6IGCURONZBDT4WBICI4VQJ62KLHVHE/
https://noc.social/@cloudflareradar/116159557740581407
* HE.net (#AS6939) route withdrawals
https://stat.ripe.net/widget/routing-history#resource=6939&starttime=2026-03-01
* JavaScript worm effect on Wikipedia
https://www.wikimediastatus.net/incidents/z7qjmqtrh8yq
https://phabricator.wikimedia.org/T419143
https://www.bleepingcomputer.com/news/security/wikipedia-hit-by-self-propagating-javascript-worm-that-vandalized-pages/
* Iranian Faraso (#AS57497) hosting provider visibility
https://stat.ripe.net/widget/routing-history#resource=57497&starttime=2026-03-01

#AWS #AS6939 #AS57497 #Wikipedia #Outages

Dataplane.org Mar 7

John Kristoff Mar 6

Weekend Reads

* Building a BGP map
https://kmcd.dev/posts/live-internet-map/
* Measuring DNS over IPv6
https://www.potaroo.net/ispcol/2026-02/v6dns.html
* ICANN root system governance
https://circleid.com/posts/icanns-ultimate-demise
* India DNS censorship examined
https://dnsblocks.in/assets/report.pdf
* Charting traceroute through subsea cables
https://aqualab.cs.northwestern.edu/publication/2026/cwang-imc26/CWang-IMC26.pdf

#BGP #DNS #IPv6 #ICANN #India #SubseaCables

Building a Live BGP Map

Building a cool looking, real-time BGP map

kmcd.dev

Dataplane.org Mar 1

The Internet Last Week

* US/Israel Attacks on Iran Internet effects
https://infosec.exchange/@ProjectAinita/116147653707149458
https://noc.social/@cloudflareradar/116151293471289304
https://mastodon.social/@IODA/116148656276570120
https://infosec.exchange/@dougmadory/116148738148192917
* NDSS Symposium 2026
https://www.ndss-symposium.org/ndss2026/
* Various US DoD route withdrawals
https://stat.ripe.net/widget/routing-history#resource=360&starttime=2026-02-22
https://stat.ripe.net/widget/routing-history#resource=647&starttime=2026-02-22
https://bgp.he.net/AS6034#_prefixes
https://stat.ripe.net/widget/routing-history#resource=34369&starttime=2026-02-22
* Python infrastructure outage
https://status.python.org/incidents/r47c43jw19zq

#Iran #NDSS2026 #USDoD #Python

ProjectAinita (@[email protected])

Attached: 1 image With #war erupting between the U.S. and #Iran, the internet is quickly impacted, leaving very few international connections operational. #IranInternetStatis #IranTensions

Infosec Exchange

Dataplane.org Feb 28

John Kristoff Feb 27

Weekend Reads

* Peering market evolution
https://blog.lacnic.net/en/peering-market-at-a-glance/
* BGP path security with ASPA
https://blog.cloudflare.com/aspa-secure-internet/
* HTTP/2 from scratch part 2
https://kmcd.dev/posts/http2-from-scratch-part-2/
* First subsea optic cable removal
https://www.wired.com/story/say-goodbye-to-the-undersea-cable-that-made-the-global-internet-possible/
* Password managers comparative analysis
https://eprint.iacr.org/2026/058.pdf

#BGP #ASPA #HTTP2 #SubseaCables #Passwords

LACNIC Blog | Peering market at a glance

By Flavio Luciani, Namex CTO and John Souter, Namex Advisor Trends, transformations, and regional dynamics of Internet interconnection Abstract Over the past decade, the Internet’s interconnection landscape has been shaped by sustained traffic growth, changing content distribution models, and increasingly complex relationships between networks. Internet Exchange Points sit at the center of these dynamics, yet […]

LACNIC Blog

Dataplane.org Feb 23

The Internet Last Week

* FOCI'26
https://foci.community/
* YouTube outage
https://support.google.com/youtube/thread/410904426
https://lists.outages.org/archives/list/[email protected]/thread/7D32HM33GNQOSK6P5IXYNOGSYZ7MIXGN/
* Iranian BGP leak
https://infosec.exchange/@dougmadory/116105289420902870
* Cloudflare BYOIP outage
https://blog.cloudflare.com/cloudflare-outage-february-20-2026/
https://www.cloudflarestatus.com/incidents/kwy3dt82bwbt
https://lists.outages.org/archives/list/[email protected]/thread/3T737SKQIRJ2SFDZ4JC5SMFWPDDYOW3Z/