Latest posts
| Blog | Age | Hits | Title |
|---|---|---|---|
| DNS reddit | 0d | 0 | best dns for home that runs a small business as well as... also i want to make sure there's no malware or anythng or anyone harmful getting through.
do I do it per device?
our mobile phones are galaxies 25 + 26
work ipad + mac studio pro
asus 5090 desktop for gaming, its... |
| DNS reddit | 0d | 3 | Is it safe to change dns to cloudFare 1.1.1 on chrome ? Hello i was told to change my DNS to cloudFare 1.1.1 on chrome to that i can access a certain website that cannot be accessed in my country. (just a french anime website nothing sketchy)
And if you were gonna suggest... |
| DNS reddit | 1d | 4 | India plans big move against VPN web privacy tools |... submitted by /u/bigtigertitties
[link] [comments] |
| DNS reddit | 2d | 6 | How to add blocklist into invizible pro I recently downloaded invizible pro hoping I can block every site ( kind of like cutting internet across the entire phone) for a specific interval of time but I can't add a blocklist into it or rather even after adding,... |
| DNS reddit | 2d | 8 | Application downtime ruining CX Folks, just a small question to the group here: Does having Multi-Provider DNS Strategy a good idea? submitted by /u/DNS-God-89
[link] [comments] |
| DomainIncite (Kevin Murphy) | 2d | 9 | Google adds .here and .eat to launch roster Google has added the long-dormant gTLDs .here and .eat to its 2026 launch timetable, synchronized with the previously announced launch of .fly. The company has told ICANN that it plans to runs its sunrise periods... |
| DomainIncite (Kevin Murphy) | 2d | 7 | “Bulletproof” registrar gets third ICANN bollocking Trustname.com, a company that advertises itself as a privacy-devoted bulletproof registrar, is still refusing to suspend domain names used for phishing, malware, and payment card theft fast enough, according to ICANN.... |
| Stephane Bortzmeyer | 2d | 8 | RFC 9852: New Protocols Using TLS Must Require TLS 1.3 Si vous concevez des protocoles réseau utilisant la cryptographie, vous utiliserez souvent TLS. Dans ce cas, pour un nouveau protocole, n'ayant pas à gérer l'existant, l'IETF vous conseille fortement, dans ce RFC,... |
| Stephane Bortzmeyer | 2d | 6 | Les limites de la métrique « nombre d'octets » sur les... La présentation, le 16 juillet 2026, du rapport annuel de l'ARCEP sur l'état de l'Internet en France (https://www.arcep.fr/actualites/actualites-et-communiques/detail/n/rapport-annuel-tome3-160726.html) a été l'occasion... |
| DNS reddit | 2d | 9 | Gonemaster for testing your DNS delegation This is a tool that I have been working for a long time on, and it is for testing DNS delegations. Released under a BSD-2 license. If you run the stack yourself, you can even spin up an MCP server for fancy AI... |
| DNS reddit | 3d | 6 | ???? The Ghost Subdomain Problem: 77,000+ Forgotten DNS... DNSAudit ran active resolution checks against the Cloudflare Radar Top 100 domains in early February. Only live A records pointing to public IPs were counted.
3,649,938 candidates tested. 2,585,395 resolved. 77,053 of... |
| DNS reddit | 3d | 9 | Best DNS filtering services for Small Businesses Im looking for a DNS filtering service that has a standard pricing for small businnesses (for example 10 euros a year not 0.5 euros per year per endpoint). I would also like it to not be very hard to configure. Can you... |
| DNS reddit | 3d | 8 | The VPN loophole in the fight to protect children submitted by /u/kishore_jana
[link] [comments] |
| Stephane Bortzmeyer | 3d | 8 | RFC 9954: Hybrid key exchange in TLS 1.3 Dans le monde merveilleux de la cryptographie post-quantique (RFC 9958), un problème se pose : si en voulant éviter le Charybde des calculateurs quantiques, on tombe dans le Scylla d'un algorithme, certes post-quantique,... |
| Stephane Bortzmeyer | 3d | 6 | RFC 9850: The SSLKEYLOGFILE Format for TLS Déboguer une application réseau qui utilise le chiffrement est difficile. Le but du chiffrement est justement d'empêcher un tiers (par exemple l'analyseur de paquets) de regarder ce qui se passe. Une approche possible... |
| Stephane Bortzmeyer | 3d | 7 | RFC 9851: TLS 1.2 is in Feature Freeze Vous pouvez toujours utiliser la version 1.2 de TLS mais ne demandez pas des ajouts, des extensions, etc. Elle est désormais gelée, aucune nouvelle fonction ne sera ajoutée, tout le travail se fait désormais sur la... |
| Stephane Bortzmeyer | 3d | 8 | RFC 9973: TLS 1.3 Extension for Using Certificates with an.. L'authentification dans TLS se fait typiquement, soit à partir d'un certificat, soit par une clé partagée à l'avance. Ce RFC spécifie une extension de TLS qui permet d'utiliser certificat et clé partagée à l'avance. Il... |
| DNS reddit | 4d | 11 | [Pre-]announcement of BIND 9 security issues [scheduled... Anticipate the new/updated software releases, etc. soon, and for downstream (e.g. via vendors/distros, etc.) generally around that time to relatively soon thereafter. I may also update this post once it's released. Feel... |
| DNS reddit | 4d | 12 | DNS Cheat Sheet submitted by /u/guruyng4321
[link] [comments] |
| DNS reddit | 4d | 10 | Cloudflare DNS issue with ProofPoint Proofpoint is reusing the same UDP session for multiple DNS queries which is against security standards and any security device will block that to include protective DNS or any NGFWs for that matter with threat... |
Blogs
DNSsexy- Ask Mr. DNS
- DNS reddit
- DomainIncite (Kevin Murphy)
- ISC.org
- Jan-Piet Mens
- Miek Gieben
- NLnet Labs
- PowerDNS Blog
- Stephane Bortzmeyer
- Tony Finch
Blog submission
Send any DNS blog that you feel adds value to the DNS community. Final decisions rest with me.
- First & Last names
- Blog name
- Blog URL
- Feed URL
About
DNSsexy is an aggregation of DNS related blogs and news. It is built, edited and maintained by Jan-Piet Mens with substantial contributions by Carsten Strotmann.
Resources
Servers
- (downloads)
- BIND
- dnsmasq
- DNSSHIM
- dnsxd
- gdnsd
- grong
- Knot-DNS
- MyDNS (NG)
- NSD
- PowerDNS
- Unbound
- Y:A:D::I::F:A
Utilities
Monitoring
- AFNIC ZoneCheck
- dnssec-monitor
- DNSSEC-Trigger
- jdnssec-verifyzone
- key-checker
- Keychecker
- ldns-verify-zone
- nagval
- OpenDNSSEC auditor
- OpenDNSSEC monitor
- SurfNet DNSSEC Checker
- validns
- Vantages D-Sync
- YAZVS
Libraries
- .NET DNS Class
- BIND10
- c-ares
- dns.c
- dns_erlang
- dnsjava
- dnspython
- DnsQuery
- dnsruby
- GNU adns
- godns
- ldns
- ldnsx
- Library DNS
- libval
- Net::DNS
- nss-ubdns
- PyUnbound
- RULI
Books
- Alternative DNS Servers
- BIND 9 DNS Administration Reference Book
- DNS & Bind
- DNS and BIND on IPv6
- DNS related RFCs
- DNSSEC Mastery with BIND
- DNSSEC reference card
- DNSSEC Specifications
- Pro DNS and BIND