🛡️ La cellule de crise de l’Afnic en force pour REMPAR25, l’exercice cyber d’envergure organisé par l’ANSSI - Agence nationale de la sécurité des systèmes d'information.

💻 Nos équipes se sont mobilisées face à une crise fictive, massive et d’un réalisme saisissant.

🌐 Cet exercice contribue à renforcer la résilience du numérique, la sécurité du DNS et notre capacité collective à anticiper des menaces.

#Afnic #Cyber #ExerciceCyber #REMPAR25 #DNS #ANSSI #RésilienceNumérique

🛡️ La cellule de crise de l’Afnic en force pour REMPAR25, l’exercice cyber d’envergure organisé par l’ANSSI - Agence nationale de la sécurité des systèmes d'information.

💻 Nos équipes se sont mobilisées face à une crise fictive, massive et d’un réalisme saisissant.

🌐 Cet exercice contribue à renforcer la résilience du numérique, la sécurité du DNS et notre capacité collective à anticiper des menaces.

#Afnic #Cyber #ExerciceCyber #REMPAR25 #DNS #ANSSI #RésilienceNumérique

#DNS

Les deux serveurs de noms faisant autorité pour oleane.net et leurs clients ont rejoint la grève.

If anyone is trying to look at blog.disintermedia.net.nz tonight, you might stumble into a construction site. All going well, it will all be tidied up and back to BAU by tomorrow morning (Aotearoa time).

Details for the curious:

We're tweaking the DNS. Mainly to deprecate the URL redirection at the domain registrar, and point disintermedia.net.nz at the About page of Ghost. Also to make the base domain name the root of the HTTPS certs, rather than the blog subdomain.

#Disintermedia #DNS

Do you think interacting with the Domain Name System is hard in #rustlang? @span nlnetlabs is working on making this easier with 'domain', our #OpenSource#DNS toolkit with building blocks for application developers. Come talk to @span partim, @span terts, Philip and me at @span rustnl to learn more. https://blog.nlnetlabs.nl/domain-dns-building-blocks-for-rust-application-developers/

I read this article by TLD ISAC:
https://www.tld-isac.eu/guidelines-for-a-resilient-dns/

Then I found myself commenting on LinkedIn.

"Very nice article!

Thanks for mentioning NLnet Labs NSD as one of the trusted name servers, along with Internet Systems Consortium, CZ.NIC, z.s.p.o. and PowerDNS. What surprises me is that with regards to resilience of these software solutions, the article just says to "run updates" to be prepared for vulnerabilities.

DNS service providers and TLD registries are ‘sectors of high criticality’ under the European #NIS2 directive. On the NIS2 supply chain security requirements, ENISA guidance says: “Ensure that support contracts cover the system life cycle and obsolescence management requirements, including the date until which the system must be supported”.

Thus, what would be a better recommendation is to have a support agreement with an SLA in place with one of these parties. This way, you get notifiied of vulnerabilies under NDA before they become public. At the same time, the agreement keeps the work of the #OpenSource software developer sustainable.

After all, when you purchase an HSM to keep your DNSSEC keys safe, budgeting to have a support agreement with the supplier in place is a no-brainer, so why not with the party who provides your critical #DNS name server software?”

Le nom de domaine WTF du jour https://mastodon.gougere.fr/@bortzmeyer/115208300498869702

#DNS

So after that, we look forward to you running Cascade through its paces and give us your honest feedback.

That should put us in a position to cross all the t's and dot all the i's before the first production release, towards the end of the year.

#DNS#DNSSEC #rustlang#OpenSource#LoveDNS

We've got the scaffolding for the installation documentation sitting in a Pull Request here: https://cascade-signer--41.org.readthedocs.build/en/41/installation.html

#DNS#DNSSEC#LoveDNS

"There’s no plan—just a person."

Last week, we pulled the cover off the research among TLDs that led to the creation of Cascade—our Rust-forged successor to OpenDNSSEC.

This week, @span benno and @span alexband will show that Cascade isn’t some polite upgrade. It’s a full reset—a ground-up reimagining. In a series of bite-sized videos, we’ll walk you through why Cascade exists—not to patch the old world, but to show the community our take on the way forward in the new one.

See you tomorrow!

#DNS

I've got the skeleton of a companion container for nginx-proxy/nginx-proxy that will use RFC2136 to add/remove CNAME entries for proxied containers as they are created/removed.

I'll push it to GitHub from my Forgejo instance once it's a little bit more polished

This is in a similar vein to my one that adds mdns/avahi CNAME to the host machine.

https://github.com/hardillb/nginx-proxy-avahi-helper

https://github.com/nginx-proxy/nginx-proxy

#nginx #dns

I've got the skeleton of a companion container for nginx-proxy/nginx-proxy that will use RFC2136 to add/remove CNAME entries for proxied containers as they are created/removed.

I'll push it to GitHub from my Forgejo instance once it's a little bit more polished

This is in a similar vein to my one that adds mdns/avahi CNAME to the host machine.

https://github.com/hardillb/nginx-proxy-avahi-helper

https://github.com/nginx-proxy/nginx-proxy

#nginx #dns

On the public mailing list of the software #BIND, a question "I need to learn more about BIND DNS server to pass my job interview next Monday"

And the guy copies the email from the company he applied to, email warning the candidate that he will have a technical interview and must know about #DNS.

#LearningDNSbeforeMonday

Der Unterschied ist schon der Hammer.

Seit ich hier #pihole am laufen habe, sehe ich mal, was die einzelnen #Geräte so alles in die Welt hinaus posaunen wollen.

Platz 1 der geblockten Anfragen ein #SmartTV, 2 ein #WindowsPC und ganz weit abgeschlagen auf Platz 10 eine #linuxworkstation .

#tracking #blocking #dns #linux

Der Unterschied ist schon der Hammer.

Seit ich hier #pihole am laufen habe, sehe ich mal, was die einzelnen #Geräte so alles in die Welt hinaus posaunen wollen.

Platz 1 der geblockten Anfragen ein #SmartTV, 2 ein #WindowsPC und ganz weit abgeschlagen auf Platz 10 eine #linuxworkstation .

#tracking #blocking #dns #linux

Pour assurer la continuité de nom de domaine de la famille, je recherche un fournisseur DNS éthique (coop ?) et local, pas trop compliqué (pour qqn pas trop IT), et pour .be et éventuellement .com, et possible de payer pour 5, 10 ans.

Vous connaissez ?

Merci pour les retoots gentils, pour chacun un câlin au chat 😸

#DNS #cherche#Belgique

Pour assurer la continuité de nom de domaine de la famille, je recherche un fournisseur DNS éthique (coop ?) et local, pas trop compliqué (pour qqn pas trop IT), et pour .be et éventuellement .com, et possible de payer pour 5, 10 ans.

Vous connaissez ?

Merci pour les retoots gentils, pour chacun un câlin au chat 😸

#DNS #cherche#Belgique

🚨 Announcing Cascade — DNSSEC signing, rebuilt from the ground up.

With 25 years of #DNS experience, we set the standard with #DNSSEC signing that delivers under pressure.
Cascade is how we carry the legacy forward.

Explore Cascade at https://blog.nlnetlabs.nl/cascade/

Unbox with us.
Cascade debuts live October 7 @ @dnsoarc 45, Stockholm.
We’ll show you what’s under the hood — and why this changes everything.

A huge thanks to the DNS community for making Cascade possible!
#rustlang#OpenSource