Latest posts
| Blog | Age | Hits | Title |
|---|---|---|---|
| Stephane Bortzmeyer | 1d | 0 | On peut générer de vrais/faux certificats Vous avez sans doute déjà lu des articles sur la faille de l'AC eMudhra (sinon, vous avez des liens à la fin). Une des conséquences de cette faille est que tout le monde peut générer des vrais/faux certificats. Exemple. |
| PowerDNS Blog | 1d | 3 | PowerDNS Recursor 5.3.13 Released Today we have released PowerDNS Recursor 5.3.13.
This release is a maintenance release that includes a single improvement: |
| PowerDNS Blog | 1d | 3 | PowerDNS Security Advisory 2026-13 for PowerDNS... Today, we are releasing three new versions of the PowerDNS Authoritative Server. These 4.9.18, 5.0.8 and 5.1.5 versions provide fixes for the following PowerDNS Security Advisory: |
| PowerDNS Blog | 1d | 3 | PowerDNS Security Advisory 2026-12 for PowerDNS Recursor Today we have released PowerDNS Recursor 5.3.12 and 5.4.8.
These releases provide fixes for PowerDNS Security Advisory 2026-12 for PowerDNS Recursor: Multiple issues
There are several CVEs associated with this... |
| NLnet Labs | 2d | 4 | NLnet Labs as an open-source software steward under the... The Cyber Resilience Act is an EU law regulating the market for hardware and software. We have an excellent understanding of this law, helped to shape its treatment of open source software and are available to help... |
| Miek Gieben | 6d | 8 | Uncloud Host Networking My server is almost fully converted to be managed by Uncloud , except for one service: atomdns . Which at first I didn t mind, but now find annoying, because: uc ps doesn t list it; my Prometheus metrics collector runs... |
| Stephane Bortzmeyer | 7d | 6 | RFC 10055: Configuring UDP Sockets for Explicit Congestion.. Un RFC un peu inhabituel que voici. Il ne spécifie pas un protocole ou un format, il explique simplement comment activer la notification de congestion (ECN) sur les systèmes d'exploitation courants. |
| ISC.org | 8d | 6 | Stork 2.6: Open Source DHCP Management Tool Stork 2.6 is a new stable version, suitable for production use. |
| Jan-Piet Mens | 9d | 9 | Root DNSSEC trust anchors The root DNSSEC trust anchor, the KSK or Key Signing Key, was rolled, i.e. renewed, on Sunday 2026-10-11. I’m not involved in the process, but I am an avid follower, and as such I tooted before the event and after:... |
| PowerDNS Blog | 10d | 11 | PowerDNS DNSdist 2.1.3 and 2.0.11 Released Today we released DNSdist 2.1.3 and 2.0.11, fixing several issues. The notable one fixes an issue where incoming DNS over TLS and DNS over HTTPS connections could have been wrongly terminated early, when the OpenSSL... |
| Stephane Bortzmeyer | 12d | 16 | Remplacement de la clé DNSSEC de la racine Aujourd'hui, la racine du DNS, qui était signée avec la clé 20326 a changé, et utilise désormais la clé 38696. |
| Stephane Bortzmeyer | 15d | 26 | La liste des candidatures pour des nouveaux domaines de... Hier, l'ICANN a publié la liste des candidatures (https://newgtldprogram-aps.icann.org/) pour obtenir un TLD lors du cycle d'enregistrements actuel. Quelques données. |
| Stephane Bortzmeyer | 15d | 26 | Piratage de trois domaines de premier niveau Du 25 au 27 septembre, un inconnu a piraté trois registres de noms de domaine. L'occasion de rappeler, face à plusieurs commentaires erronés, que si un attaquant prend le contrôle du nom de domaine, il peut tout faire... |
| Stephane Bortzmeyer | 16d | 28 | RFC 10049: Roughtime: A Protocol for Rough Time... Ce nouveau protocole de synchronisation d'horloges, Roughtime est, officiellement, encore expérimental. Deux de ses buts essentiels sont la possibilité d'une synchronisation sécurisée (avec de la cryptographie, donc),... |
| PowerDNS Blog | 16d | 33 | Preparing for Post Quantum DNSSEC with PowerDNS Post Quantum for DNSSEC |
| DomainIncite (Kevin Murphy) | 16d | 29 | Tomorrow is lowkey Reveal Day ICANN s much-anticipated new gTLD Reveal Day is tomorrow, October 7, but it s going to be a much more subdued affair than the 2012 round. In 2012, there was a live, in-person event at a swanky hotel in London, led by... |
| DomainIncite (Kevin Murphy) | 17d | 32 | .bank registry looking for new boss fTLD Registry Services, which runs .bank and .insurance as restricted gTLDs for the financial services industry, is looking for a new president and CEO. Craig Schwartz, a one-time ICANNer who has been leading the company... |
| DomainIncite (Kevin Murphy) | 17d | 31 | Junk drop hits .my domains hard .my domains slumped hard in September, apparently as a result of a junk drop a year after a largely successful promotion. Local registry MYNIC is reporting 693,122 .my domains at the end of the month, down from 826,384... |
| DomainIncite (Kevin Murphy) | 17d | 31 | As GoDaddy loses .us to Identity Digital, some domains may.. Identity Digital will replace rival GoDaddy Registry as manager of the .us ccTLD, but new contractual terms could put some registrants and potentially even registrars at risk. The US National Telecommunications and... |
| Stephane Bortzmeyer | 18d | 26 | La conférence « Histories of tracking » 2026 Du 30 septembre au 2 octobre, j'ai eu le plaisir de participer à la conférence Histories of Tracking (https://www.uni.lu/c2dh-en/events/histories-of-tracking/) à l'Université du Luxembourg. Cette conférence était... |
Blogs
DNSsexy- Ask Mr. DNS
- DomainIncite (Kevin Murphy)
- ISC.org
- Jan-Piet Mens
- Miek Gieben
- NLnet Labs
- PowerDNS Blog
- Stephane Bortzmeyer
- Tony Finch
Blog submission
Send any DNS blog that you feel adds value to the DNS community. Final decisions rest with me.
- First & Last names
- Blog name
- Blog URL
- Feed URL
About
DNSsexy is an aggregation of DNS related blogs and news. It is built, edited and maintained by Jan-Piet Mens with substantial contributions by Carsten Strotmann.
Resources
Servers
- (downloads)
- BIND
- dnsmasq
- DNSSHIM
- dnsxd
- gdnsd
- grong
- Knot-DNS
- MyDNS (NG)
- NSD
- PowerDNS
- Unbound
- Y:A:D::I::F:A
Utilities
Monitoring
- AFNIC ZoneCheck
- dnssec-monitor
- DNSSEC-Trigger
- jdnssec-verifyzone
- key-checker
- Keychecker
- ldns-verify-zone
- nagval
- OpenDNSSEC auditor
- OpenDNSSEC monitor
- SurfNet DNSSEC Checker
- validns
- Vantages D-Sync
- YAZVS
Libraries
- .NET DNS Class
- BIND10
- c-ares
- dns.c
- dns_erlang
- dnsjava
- dnspython
- DnsQuery
- dnsruby
- GNU adns
- godns
- ldns
- ldnsx
- Library DNS
- libval
- Net::DNS
- nss-ubdns
- PyUnbound
- RULI
Books
- Alternative DNS Servers
- BIND 9 DNS Administration Reference Book
- DNS & Bind
- DNS and BIND on IPv6
- DNS related RFCs
- DNSSEC Mastery with BIND
- DNSSEC reference card
- DNSSEC Specifications
- Pro DNS and BIND