Blogs

  • Introduction

    One of the things that I’m keen to get off the ground here at ISC is the measurement of quality. In the past few weeks since I’ve arrived, a lot of talk has been bandied about regarding quality, and specifically, improving it. Now, I’ve got some definite ideas about how to move towards that goal, and I know there is

    Read more
    0
    0
  • ISC in Africa

      ISC has always been supportive of Internet infrastructure development in Africa. In addition to being the first root-server operator to offer anycast instances in Africa, we have long provided Secondary Name Services (SNS) to a number of African ccTLDs as part of our public benefit mission. We have also sent our staff to AfNOG meetings to help in training

    Read more
    0
    0
  • A Word About Windows Binary BIND Distributions and OpenSSL Libraries

    At ISC we have recently received several inquiries from customers who are using the binary packages of BIND that we distribute for Microsoft Windows. They have expressed concerns about security vulnerabilities present in older versions of OpenSSL.  BIND uses OpenSSL for securing communications between dynamic nameservers and clients and between master servers and slave servers.  To support this functionality, ISC

    Read more
    0
    0
  • BIND 9.9 – why should you care?

    BIND 9.9 is a new release of the gold standard for DNS servers on the Internet. It builds on a tried and trusted platform that has been evolving and maturing over more than 10 years and has kept adding new powerful and useful features with each new release. In BIND 9.9 we have introduce several new features that can make

    Read more
    0
    0
  • TechWomen Mentor – The Power of Mentoring – Looking Forward

    I was so honored to participate in the TechWomen mentoring program in the summer of 2011. Meeting and working with my mentee, Sanae Baatti from Morocco, was a life changing experience. I wrote some about the TechWomen experience last summer. I was deeply honored as well, to travel to Morocco last fall with a state department sponsored TechWomen mentor and

    Read more
    0
    0
  • BIND 9.9.0b2 — a feature update

    Today, ISC is publishing a new beta release of BIND 9.9.0.  As several new features have been added since the feature preview I posted on the occasion of the first alpha release, it would seem to be a good time for an update. Inline signing The new ‘inline-signing’ option, in combination with the ‘auto-dnssec’ option that was introduced in BIND 9.7,

    Read more
    0
    0
  • Routing configuration over DHCPv6

    Currently the DHCPv6 protocol does not allow the provisioning of any routing-related information to hosts. A new proposal is addressing this shortcoming. The draft draft-ietf-mif-dhcpv6-route-option defines a mechanism for delivering routing information over the DHCPv6 protocol. This article explains core concepts and explains how to use the ISC DHCP software to deliver such information. A bit of history When the IPv6

    Read more
    4
    0
  • TechWoman in Marrakesh-an October ’11 update

    As I wrote in June (link to my last techwomen blog), I’ve been deeply honored this year to participate in the inaugural round of the TechWomen initiative, a program of the US State Department, as a technical mentor. This program brings technical women from the Middle East and North Africa to Silicon Valley for technical mentorships and also has brought

    Read more
    0
    0
  • Other Uses for Secure DNS

    Reprinted from ;login: The USENIX Magazine, vol. 36, no. 5 (Berkeley, CA: USENIX Associa- tion, 2011), pp. 13–16. Since the mid-1990s I’ve been a member of a distributed multi-generational team working to secure the Domain Name System. Many ideas and people have come and gone in the decade and a half since this work began, and the current work in

    Read more
    0
    0
  • Protecting Intellectual Property is Good; Mandatory DNS Filtering is Bad

    It has been about six months since I got together with four of my friends from the DNS world and we co-authored a white paper which explains the technical problems with mandated DNS filtering. The legislation we were responding to was S. 968, also called the PROTECT-IP act, which was introduced this year in the U. S. Senate. By all

    Read more
    0
    0
  • Origin ASN for Anycasted Services

    There is a new draft from the IETF GROW working group that attempts to standardize how Anycasted services manage their routing announcements.  The draft can be found at: ftp://ftp.rfc-editor.org/in-notes/internet-drafts/draft-ietf-grow-unique-origin-as-01.txt Before commenting directly on the draft a review of how ISC operates the F-Root Anycast network is in order. ISC maintains ASN 3557 which is used to originate the F-Root prefixes

    Read more
    0
    0
  • ISC BIND 9.9.0a1 — feature preview

    Yesterday afternoon, ISC published the first alpha release of BIND 9.9.0. This is an early technology preview, showing off some of the work we’ve been doing in BIND 9. There will be more new features added in later alpha releases, but here’s what’s ready to debut now… New Features The big new item in 9.9.0a1 is NXDOMAIN redirection.  This enables a

    Read more
    0
    0

Last modified: November 1, 2016 at 1:25 pm