TechHub

Rafael KassnerTIL: <a href="https://phpc.social/tags/coredns" class="mention hashtag" rel="nofollow noopener" target="_blank">#coredns</a> <a href="https://phpc.social/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a> plugin only supports 3600s as TTL 😢 > As the dnssec plugin can’t see the original TTL of the RRSets it signs, it will always use 3600s as the value.<a href="https://coredns.io/plugins/dnssec/" rel="nofollow noopener" translate="no" target="_blank">https://coredns.io/plugins/dnssec/</a>

PowerDNSPowerDNS Authoritative Server 4.9.8 Released<a href="https://blog.powerdns.com/powerdns-authoritative-server-4.9.8" rel="nofollow noopener" translate="no" target="_blank">https://blog.powerdns.com/powerdns-authoritative-server-4.9.8</a><a href="https://fosstodon.org/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> <a href="https://fosstodon.org/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a>

dmstorkNew blog post: Why every organization should enable DANE <a href="https://davestork.nl/why-every-organization-should-enable-dane/" rel="nofollow noopener" translate="no" target="_blank">https://davestork.nl/why-every-organization-should-enable-dane/</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/SMTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMTP</a> <a href="https://mastodon.social/tags/mail" class="mention hashtag" rel="nofollow noopener" target="_blank">#mail</a> <a href="https://mastodon.social/tags/MSExchange" class="mention hashtag" rel="nofollow noopener" target="_blank">#MSExchange</a> <a href="https://mastodon.social/tags/Microsoft365" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft365</a> <a href="https://mastodon.social/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNSSEC</a> <a href="https://mastodon.social/tags/AzureDNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#AzureDNS</a>

heise SecurityPodcast "Passwort" Folge 37: DNSSEC, die DNS Security ExtensionsDNS ist ein Grundpfeiler des Internets – umso wichtiger, dass die Namensauflösung verlässliche Daten liefert. Wie DNSSEC dabei hilft, erklärt ein kundiger Gast.<a href="https://www.heise.de/news/Podcast-Passwort-Folge-37-DNSSEC-die-DNS-Security-Extensions-10498530.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon" rel="nofollow noopener" translate="no" target="_blank">https://www.heise.de/news/Podcast-Passwort-Folge-37-DNSSEC-die-DNS-Security-Extensions-10498530.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon</a><a href="https://social.heise.de/tags/Automatisierung" class="mention hashtag" rel="nofollow noopener" target="_blank">#Automatisierung</a> <a href="https://social.heise.de/tags/DANE" class="mention hashtag" rel="nofollow noopener" target="_blank">#DANE</a> <a href="https://social.heise.de/tags/DNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNS</a> <a href="https://social.heise.de/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNSSEC</a> <a href="https://social.heise.de/tags/IETF" class="mention hashtag" rel="nofollow noopener" target="_blank">#IETF</a> <a href="https://social.heise.de/tags/IT" class="mention hashtag" rel="nofollow noopener" target="_blank">#IT</a> <a href="https://social.heise.de/tags/PasswortPodcast" class="mention hashtag" rel="nofollow noopener" target="_blank">#PasswortPodcast</a> <a href="https://social.heise.de/tags/Podcast" class="mention hashtag" rel="nofollow noopener" target="_blank">#Podcast</a> <a href="https://social.heise.de/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://social.heise.de/tags/news" class="mention hashtag" rel="nofollow noopener" target="_blank">#news</a>

Internet.nl<a href="https://mastodon.libre-entreprise.com/@camille" class="u-url mention" rel="nofollow noopener" target="_blank">@camille</a> Thanks for your feedback. Do you have an example domain?The test validates <a href="https://mastodon.nl/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNSSEC</a> <a href="https://mastodon.nl/tags/ED25519" class="mention hashtag" rel="nofollow noopener" target="_blank">#ED25519</a> signatures on ed25519.nl and ed25519.no: - <a href="https://internet.nl/site/ed25519.nl/3367385/#sitednssec" rel="nofollow noopener" translate="no" target="_blank">https://internet.nl/site/ed25519.nl/3367385/#sitednssec</a> - <a href="https://internet.nl/site/ed25519.no/3367390/#sitednssec" rel="nofollow noopener" translate="no" target="_blank">https://internet.nl/site/ed25519.no/3367390/#sitednssec</a>

PowerDNSPowerDNS Recursor 5.1.7 and 5.2.5 Released<a href="https://blog.powerdns.com/powerdns-recursor-5.1.7-and-5.2.5-released" rel="nofollow noopener" translate="no" target="_blank">https://blog.powerdns.com/powerdns-recursor-5.1.7-and-5.2.5-released</a><a href="https://fosstodon.org/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> <a href="https://fosstodon.org/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a>

ChaCha20Poly1305<a href="https://mastodon.nl/@internet_nl" class="u-url mention" rel="nofollow noopener" target="_blank">@internet_nl</a> your <a href="https://mastodon.libre-entreprise.com/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNSSEC</a> test seems to be unable to validate <a href="https://mastodon.libre-entreprise.com/tags/ED25519" class="mention hashtag" rel="nofollow noopener" target="_blank">#ED25519</a> signatures.

:hacker_p: :hacker_f: :hacker_t:The suggestion that <a href="https://infosec.exchange/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a> is not important because we have <a href="https://infosec.exchange/tags/tls" class="mention hashtag" rel="nofollow noopener" target="_blank">#tls</a> certs blows my mind. Domain validation (over DNS) is mandatory for every <a href="https://infosec.exchange/tags/x509" class="mention hashtag" rel="nofollow noopener" target="_blank">#x509</a> cert containing domain names (in the Web PKI ecosystem). If your DNS is compromised, your TLS cert is useless.

tskLike little lightbulbs turning on over one's head... <a href="https://infosec.exchange/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a> <a href="https://infosec.exchange/tags/https" class="mention hashtag" rel="nofollow noopener" target="_blank">#https</a> <a href="https://infosec.exchange/tags/tls" class="mention hashtag" rel="nofollow noopener" target="_blank">#tls</a> <a href="https://infosec.exchange/tags/pki" class="mention hashtag" rel="nofollow noopener" target="_blank">#pki</a><a href="https://www.theregister.com/2025/07/25/systems_approach_column_dns_security/" rel="nofollow noopener" translate="no" target="_blank">https://www.theregister.com/2025/07/25/systems_approach_column_dns_security/</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/DNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNS</a> security is important but <a href="https://mastodon.thenewoil.org/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNSSEC</a> may be a failed experiment<a href="https://www.theregister.com/2025/07/25/systems_approach_column_dns_security/" rel="nofollow noopener" translate="no" target="_blank">https://www.theregister.com/2025/07/25/systems_approach_column_dns_security/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

JP MensVia a mailing list, I get to see a very impressive-looking <a href="https://mastodon.social/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNSSEC</a> waterfall:<a href="https://dnsviz.net/d/time.nist.gov/aID54g/dnssec/" rel="nofollow noopener" translate="no" target="_blank">https://dnsviz.net/d/time.nist.gov/aID54g/dnssec/</a><a href="https://mastodon.social/tags/kaputt" class="mention hashtag" rel="nofollow noopener" target="_blank">#kaputt</a>

Loki the CatDNSSEC: officially the "worst performing technology" of internet protocols at 34% adoption after 28 years. Meanwhile HTTPS is living its best life at 96%. Sometimes being invisible isn't a superpower! 👻<a href="https://it.slashdot.org/story/25/07/25/1714202/dns-security-is-important-but-dnssec-may-be-a-failed-experiment" rel="nofollow noopener" translate="no" target="_blank">https://it.slashdot.org/story/25/07/25/1714202/dns-security-is-important-but-dnssec-may-be-a-failed-experiment</a><a href="https://toot.community/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNSSEC</a> <a href="https://toot.community/tags/DNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNS</a> <a href="https://toot.community/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a>

rvstaverenFor what it is worth, earlier this month my private <a href="https://mastodon.online/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> zone was <a href="https://mastodon.online/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a> signed 20 years ago. First with the perl based RIPE DISI tools, then I tried opendnssec in a way to complicated setup with a nsd/bind combo or bind with separate signed/unsigned views (can’t remember), then it became zkt to end up with running with bind’s dnssec-policy What a ride

PowerDNSPowerDNS Authoritative Server 5.0.0-beta1 Released<a href="https://blog.powerdns.com/powerdns-authoritative-server-5.0.0-beta1-released" rel="nofollow noopener" translate="no" target="_blank">https://blog.powerdns.com/powerdns-authoritative-server-5.0.0-beta1-released</a><a href="https://fosstodon.org/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> <a href="https://fosstodon.org/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a>

Sven222Ich bräuchte mal Eure Hilfe. Da ich mir mal für meinen Spielmailserver <a href="https://soc.hardwarepunk.de/search?tag=DANE" class="mention hashtag" rel="nofollow noopener" target="_blank">#DANE</a> und <a href="https://soc.hardwarepunk.de/search?tag=DNSSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNSSEC</a> anschauen will, habe ich mir bei <a href="https://soc.hardwarepunk.de/search?tag=deSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#deSEC</a> einen Account geholt und die Nameserver von denen bei <a href="https://soc.hardwarepunk.de/search?tag=Hetzner" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hetzner</a> eingetragen. Wenn ich jetzt einen DNSSEC Validator drüberlaufen lasse, dann sehe ich, dass in der DE Zone logischerweise keine DS Einträge vorhanden sind, die müssen ja über den Registrar dahin. Bei Hetzner finde ich keine Möglichkeit diese Einstellungen irgendwo zu hinterlegen. Weiß jemand ob das geht? Wenn nicht, welchen Registrar würdet Ihr empfehlen, der das kann? Gerne günstig und aus Deutschland. Geht das bei <a href="https://soc.hardwarepunk.de/search?tag=Netcup" class="mention hashtag" rel="nofollow noopener" target="_blank">#Netcup</a>? <a href="https://soc.hardwarepunk.de/search?tag=fedihelp" class="mention hashtag" rel="nofollow noopener" target="_blank">#fedihelp</a> <a href="https://soc.hardwarepunk.de/search?tag=admin" class="mention hashtag" rel="nofollow noopener" target="_blank">#admin</a> <a href="https://soc.hardwarepunk.de/search?tag=dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a>

PowerDNSPowerDNS Recursor 5.3.0-beta1 Released<a href="https://blog.powerdns.com/powerdns-recursor-5.3.0-beta1-released" rel="nofollow noopener" translate="no" target="_blank">https://blog.powerdns.com/powerdns-recursor-5.3.0-beta1-released</a><a href="https://fosstodon.org/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> <a href="https://fosstodon.org/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a>

O SlovenskuVláda projednala dne 9. července 2025 zprávu předloženou Ministerstvem průmyslu a obchodu, která hodnotí pokrok při zavádění technologií IPv6Tón: : mírně pozitivní <a href="https://rockosbasilisk.com/tags/%C4%8Desko" class="mention hashtag" rel="nofollow noopener" target="_blank">#česko</a> <a href="https://rockosbasilisk.com/tags/gdelt" class="mention hashtag" rel="nofollow noopener" target="_blank">#gdelt</a> <a href="https://rockosbasilisk.com/tags/ipv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#ipv6</a> <a href="https://rockosbasilisk.com/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a> <a href="https://rockosbasilisk.com/tags/ministerstvo" class="mention hashtag" rel="nofollow noopener" target="_blank">#ministerstvo</a> <a href="https://mpo.gov.cz/cz/e-komunikace-a-posta/elektronicke-komunikace/zprava-o-podpore-protokolu-ipv6-a-technologie-dnssec-ve-statni-sprave-ceske-republiky--288703/" rel="nofollow noopener" translate="no" target="_blank">https://mpo.gov.cz/cz/e-komunikace-a-posta/elektronicke-komunikace/zprava-o-podpore-protokolu-ipv6-a-technologie-dnssec-ve-statni-sprave-ceske-republiky--288703/</a>

PowerDNSThe all-rounder DNSdist 2.0 is here!<a href="https://blog.powerdns.com/the-all-rounder-dnsdist-2.0-is-here" rel="nofollow noopener" translate="no" target="_blank">https://blog.powerdns.com/the-all-rounder-dnsdist-2.0-is-here</a><a href="https://fosstodon.org/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> <a href="https://fosstodon.org/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a>

PowerDNSPowerDNS Security Advisory 2025-04 (aka PowerDNS Recursor 5.0.12, 5.1.6 and 5.2.4 released)<a href="https://blog.powerdns.com/powerdns-security-advisory-2025-04" rel="nofollow noopener" translate="no" target="_blank">https://blog.powerdns.com/powerdns-security-advisory-2025-04</a><a href="https://fosstodon.org/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> <a href="https://fosstodon.org/tags/dnssec" class="mention hashtag" rel="nofollow noopener" target="_blank">#dnssec</a>

ChaCha20Poly1305<a href="https://tooter.wishy.co.uk/@wishy" class="u-url mention" rel="nofollow noopener" target="_blank">@wishy</a> An ISP should have a resolver not lying and not filtering <a href="https://mastodon.libre-entreprise.com/tags/DNSSEC" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNSSEC</a> as french ISP <a href="https://mastodon.libre-entreprise.com/tags/Numericable" class="mention hashtag" rel="nofollow noopener" target="_blank">#Numericable</a>/#SFR is doing.

Recent searches

Search options

Administered by:

Server stats:

#dnssec