Quad9 has new DNS over HTTPS and DNS over TLS .mobileconfig profiles for iOS/MacOS for January 2026 <-> January 2027.

The previous profile expires today, January 20th.

The new .mobileconfig files now support MacOS >=26.1, which did not work with the previous (2025 -> 2026) files due to a breaking change introduced in MacOS 26.1.

Download the profiles here:
https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_%28Encrypted%29/

#infosec #DNS

Remember, sharing is caring!

Quad9 has new DNS over HTTPS and DNS over TLS .mobileconfig profiles for iOS/MacOS for January 2026 <-> January 2027.

The previous profile expires today, January 20th.

The new .mobileconfig files now support MacOS >=26.1, which did not work with the previous (2025 -> 2026) files due to a breaking change introduced in MacOS 26.1.

Download the profiles here:
https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_%28Encrypted%29/

#infosec #DNS

Remember, sharing is caring!

What came first: the CNAME or the A record?

https://blog.cloudflare.com/cname-a-record-order-dns-standards/

#HackerNews #CNAME #ARecord #DNS #DNSStandards #Cloudflare

We're experimenting with incremental DNSSEC signing in ‘dnst signer’, to prepare for this functionality in Cascade.

Currently we can sign the changes in the .se zone between last Saturday and Sunday in 3 seconds. Loading the unsigned zone takes 6 seconds and writing out the new signed zone another 12 seconds.

For comparison, the non-incremental signer took ~35 seconds (vs 3s for incremental), even with parallelism.

#DNS #DNSSEC #OpenSource #rustlang

https://github.com/NLnetLabs/dnst/pull/148

What came first: the CNAME or the A record?
https://blog.cloudflare.com/cname-a-record-order-dns-standards/ Super interesting blog post by the Cloudflare team on #DNS record ordering and why it currently matters. (It's always DNS.)

Incremental signing will be part of the first Cascade production release. https://github.com/NLnetLabs/dnst/pull/148

#DNS #DNSSEC #rustlang #OpenSource

What came first: the CNAME or the A record?
https://blog.cloudflare.com/cname-a-record-order-dns-standards/ Super interesting blog post by the Cloudflare team on #DNS record ordering and why it currently matters. (It's always DNS.)

Dear DNS operators, do you have any need for setting NSEC3 salt and iterations?

https://community.nlnetlabs.nl/t/any-need-for-setting-nsec3-salt-and-iterations/62

#DNS #DNSSEC #rustlang #OpenSource

PowerDNS Recursor 5.3.4 Released

https://blog.powerdns.com/2026/01/14/powerdns-recursor-5.3.4-released

#dns #dnssec

PowerDNS Recursor 5.3.4 Released

https://blog.powerdns.com/2026/01/14/powerdns-recursor-5.3.4-released

#dns #dnssec

Just €6000 to go to get the queer gtld .meow. C’mon internet!

https://www.kickstarter.com/projects/dotmeow/meow-next-round-gtld-application
#kickstarter #dotmeow #dns #gtld

🎉 Our DNS service is now listed on @european_alternatives!

🔒 What we offer:
• Censorship-free DNS resolvers (EU-based)
• No logs, no data sharing
• DoH, DoT & DoQ support

🌐 DNS servers:
• 185.150.99.255 / 5.1.66.255
• 2001:678:e68:f000:: / 2001:678:ed0:f000::
• https://doh.ffmuc.net/dns-query
• dot.ffmuc.net

Setup guides for browsers, Fritzbox, Android & iOS 👇

📖 https://ffmuc.net/freifunk/dns/privacy/2026/01/13/european-alternatives-listing/#en

#DNS #Datenschutz #DigitaleSouveränität #DigitalIndependenceDay #DIDay #DigitaleUnabhängigkeit #Wechselrezepte

🎉 Unser DNS-Service ist jetzt bei @european_alternatives gelistet!

🔒 Was wir bieten:
• Zensurfreie DNS-Resolver (EU-basiert)
• Keine Logs, keine Datenweitergabe
• DoH, DoT & DoQ Support

🌐 DNS-Server:
• 185.150.99.255 / 5.1.66.255
• 2001:678:e68:f000:: / 2001:678:ed0:f000::
• https://doh.ffmuc.net/dns-query
• dot.ffmuc.net

Anleitungen für Browser, Fritzbox, Android & iOS im Blogpost 👇

📖 https://ffmuc.net/freifunk/dns/privacy/2026/01/13/european-alternatives-listing/#de

#DNS #Datenschutz #DigitaleSouveränität #DIDay #DigitaleUnabhängigkeit #Wechselrezepte