News

• The Camel’s Back: Recursive to Authoritative DNS with Encryption

  2021-04-12 Blog

  With the mushrooming deployment of encrypted DNS transport protocols like DNS over HTTPS (DoH) and DNS over TLS (DoT), one might be seduced into thinking that in-flight confidentiality of DNS queries is a problem done and dusted. A comprehensive modeling of the security threats, however, reveals otherwise.

  Read more

• EU Policy Update – March 2021

  2021-04-08 EU Policy Updates

  In a nutshell: The European Commission unveiled its Digital Targets for 2030. Four EU countries called for European digital sovereignty in a letter to the European Commission. The European Data Protection Supervisor issued an opinion on the Europol Regulation proposal and the NIS 2 Directive proposal. The European Court of Justice delivered a judgment about the admissibility of evidence in cases of access to electronic communications traffic and location data. The Council of the EU adopted conclusions on the EU cybersecurity strategy. The European Parliament adopted its resolution on the implementation of the GDPR. EUIPO published a discussion paper on challenges and good practices to prevent the misuse of domain names for IP infringements.

  Read more

• DNSSEC deployment and automation: an interview with Ulrich Wisser

  2021-03-25 Blog

  Discussed since the 1990s, the Domain Name System Security Extensions (DNSSEC) add authenticity to DNS records. To understand the current state of DNSSEC deployment, we interviewed Ulrich Wisser, who works at the Swedish Internet Foundation, a CENTR member that operates the .se top-level domain. We also discuss an Internet Draft co-authored by Ulrich Wisser that proposes an algorithm and a protocol to automate operations for multi-signer DNSSEC. The text has been edited for brevity and clarity.

  Read more