Latest posts
| Blog | Age | Hits | Title |
|---|---|---|---|
| Jan-Piet Mens | 0d | 0 | Root DNSSEC trust anchors The root DNSSEC trust anchor, the KSK or Key Signing Key, was rolled, i.e. renewed, on Sunday 2026-10-11. I’m not involved in the process, but I am an avid follower, and as such I tooted before the event and after:... |
| PowerDNS Blog | 2d | 4 | PowerDNS DNSdist 2.1.3 and 2.0.11 Released Today we released DNSdist 2.1.3 and 2.0.11, fixing several issues. The notable one fixes an issue where incoming DNS over TLS and DNS over HTTPS connections could have been wrongly terminated early, when the OpenSSL... |
| Stephane Bortzmeyer | 3d | 4 | Remplacement de la clé DNSSEC de la racine Aujourd'hui, la racine du DNS, qui était signée avec la clé 20326 a changé, et utilise désormais la clé 38696. |
| Stephane Bortzmeyer | 6d | 15 | La liste des candidatures pour des nouveaux domaines de... Hier, l'ICANN a publié la liste des candidatures (https://newgtldprogram-aps.icann.org/) pour obtenir un TLD lors du cycle d'enregistrements actuel. Quelques données. |
| Stephane Bortzmeyer | 6d | 15 | Piratage de trois domaines de premier niveau Du 25 au 27 septembre, un inconnu a piraté trois registres de noms de domaine. L'occasion de rappeler, face à plusieurs commentaires erronés, que si un attaquant prend le contrôle du nom de domaine, il peut tout faire... |
| Stephane Bortzmeyer | 7d | 19 | RFC 10049: Roughtime: A Protocol for Rough Time... Ce nouveau protocole de synchronisation d'horloges, Roughtime est, officiellement, encore expérimental. Deux de ses buts essentiels sont la possibilité d'une synchronisation sécurisée (avec de la cryptographie, donc),... |
| PowerDNS Blog | 8d | 23 | Preparing for Post Quantum DNSSEC with PowerDNS Post Quantum for DNSSEC |
| DomainIncite (Kevin Murphy) | 8d | 21 | Tomorrow is lowkey Reveal Day ICANN s much-anticipated new gTLD Reveal Day is tomorrow, October 7, but it s going to be a much more subdued affair than the 2012 round. In 2012, there was a live, in-person event at a swanky hotel in London, led by... |
| DomainIncite (Kevin Murphy) | 9d | 23 | .bank registry looking for new boss fTLD Registry Services, which runs .bank and .insurance as restricted gTLDs for the financial services industry, is looking for a new president and CEO. Craig Schwartz, a one-time ICANNer who has been leading the company... |
| DomainIncite (Kevin Murphy) | 9d | 21 | Junk drop hits .my domains hard .my domains slumped hard in September, apparently as a result of a junk drop a year after a largely successful promotion. Local registry MYNIC is reporting 693,122 .my domains at the end of the month, down from 826,384... |
| DomainIncite (Kevin Murphy) | 9d | 23 | As GoDaddy loses .us to Identity Digital, some domains may.. Identity Digital will replace rival GoDaddy Registry as manager of the .us ccTLD, but new contractual terms could put some registrants and potentially even registrars at risk. The US National Telecommunications and... |
| Stephane Bortzmeyer | 9d | 17 | La conférence « Histories of tracking » 2026 Du 30 septembre au 2 octobre, j'ai eu le plaisir de participer à la conférence Histories of Tracking (https://www.uni.lu/c2dh-en/events/histories-of-tracking/) à l'Université du Luxembourg. Cette conférence était... |
| Stephane Bortzmeyer | 9d | 18 | Le rapport de l'ANSSI sur le piratage de la DGFIP Vous le savez, en ce moment, c'est la fête des fuites de données personnelles en France. Tout le monde (et son chat) a déjà été victime d'au moins une fuite. Au moins, grâce au RGPD, on est informé qu'il y a eu une fuite... |
| PowerDNS Blog | 13d | 12 | PowerDNS Recursor 5.3.11 and 5.4.7 Released Today we have released PowerDNS Recursor 5.3.11 and 5.4.7.
These are maintenance releases that fix bugs and include a few improvements. The most important ones are: |
| Stephane Bortzmeyer | 14d | 10 | From Markup to Markdown Aujourd'hui, bien des gens croient que la seule façon d'écrire un texte (sans le faire générer par un LLM) est d'utiliser un logiciel de traitement de textes graphique comme Writer. Mais il existe une autre méthode, plus... |
| PowerDNS Blog | 15d | 14 | End of Life Announcement: Debian 11 On the 31st of August of this year (2026) Debian 11 "Bullseye" reached the end of its Long Term Support period, at which point we consider Bullseye to be End of Life.
As we do not want to support our software running... |
| Miek Gieben | 16d | 3 | Uncloud Server Setup; DONE! This was the plan and I finally got around doing it. The original list was: A docker registry for pushing and pulling images too. Maybe I can setup Forgejo to also be a registry, but just the docker registry might be... |
| Stephane Bortzmeyer | 20d | 18 | RFC 10050: Protocol-Specific Profiles for JSContact La norme JSContact décrit un modèle de données et un format pour stocker des informations de contact sur une entité (personne physique ou morale). Elle est riche, avec beaucoup d'informations dont toutes les applications... |
| PowerDNS Blog | 22d | 22 | PowerDNS DNSdist 2.0.10 Released Today we released DNSdist 2.0.10, fixing a regression that was introduced in DNSdist 2.0.9 and was preventing dynamically blocking a suffix via the FFI interface, as done for example by DNSdist Defender. |
| DomainIncite (Kevin Murphy) | 22d | 18 | “Time to lawyer up…” Anger grows over Verisign’s .name... When Verisign said it wanted to unilaterally delete 22,000 .name domains from its registry, it assured ICANN that most of them were not in use and seizing them would not cause any security concerns. But most is not all ,... |
Blogs
DNSsexy- Ask Mr. DNS
- DomainIncite (Kevin Murphy)
- ISC.org
- Jan-Piet Mens
- Miek Gieben
- NLnet Labs
- PowerDNS Blog
- Stephane Bortzmeyer
- Tony Finch
Blog submission
Send any DNS blog that you feel adds value to the DNS community. Final decisions rest with me.
- First & Last names
- Blog name
- Blog URL
- Feed URL
About
DNSsexy is an aggregation of DNS related blogs and news. It is built, edited and maintained by Jan-Piet Mens with substantial contributions by Carsten Strotmann.
Resources
Servers
- (downloads)
- BIND
- dnsmasq
- DNSSHIM
- dnsxd
- gdnsd
- grong
- Knot-DNS
- MyDNS (NG)
- NSD
- PowerDNS
- Unbound
- Y:A:D::I::F:A
Utilities
Monitoring
- AFNIC ZoneCheck
- dnssec-monitor
- DNSSEC-Trigger
- jdnssec-verifyzone
- key-checker
- Keychecker
- ldns-verify-zone
- nagval
- OpenDNSSEC auditor
- OpenDNSSEC monitor
- SurfNet DNSSEC Checker
- validns
- Vantages D-Sync
- YAZVS
Libraries
- .NET DNS Class
- BIND10
- c-ares
- dns.c
- dns_erlang
- dnsjava
- dnspython
- DnsQuery
- dnsruby
- GNU adns
- godns
- ldns
- ldnsx
- Library DNS
- libval
- Net::DNS
- nss-ubdns
- PyUnbound
- RULI
Books
- Alternative DNS Servers
- BIND 9 DNS Administration Reference Book
- DNS & Bind
- DNS and BIND on IPv6
- DNS related RFCs
- DNSSEC Mastery with BIND
- DNSSEC reference card
- DNSSEC Specifications
- Pro DNS and BIND