#oarc40 — Public Fediverse posts

I've just published a new version of my #DNS TTL extension for #EPP. I've asked to present it to the #regext working group at the next #IETF meeting in Yokohama to request WG adoption. Apparently it was mentioned during last week's #OARC40 meeting so there's evidently still interest! https://www.ietf.org/archive/id/draft-regext-brown-epp-ttl-04.html

The Internet Last Week

* Microsoft patch Tuesday
https://msrc.microsoft.com/update-guide/releaseNote/2023-Feb
https://www.akamai.com/blog/security-research/akamai-perspective-patch-tuesday-february-2023
* US T-Mobile outage
https://www.reuters.com/business/media-telecom/t-mobile-down-thousands-users-us-downdetector-2023-02-14/
https://puck.nether.net/pipermail/outages/2023-February/014641.html
* NANOG 87 / OARC 40
https://www.nanog.org/events/nanog-87/
https://indico.dns-oarc.net/event/46/
* Superbowl traffic trends
https://blog.cloudflare.com/super-bowl-lvii/
#Microsoft #TMobile #NANOG87 #OARC40 #Superbowl

"Realtime DNS Exfiltration Detection in Recursive Resolvers" by David Rodriguez

There are many free software to create a #DNS tunnel (for instance iodine). (Nice Perl code to illustrate.)

#OARC40 #LoveDNS

@shaft Une des questions sur mon exposé à #OARC40 a été "Drink devrait gérer le type ANY".

It created a huge discussion, both on Zoom and on Mattermost. People love RFC and care about them, so it is always passionate. There are even people who criticize the fact that some people comment on RFC.

#LoveDNS #OARC40

"Measuring TTL Violation of DNS Resolvers at scale" by Tijay Chung

Measuring is not obvious (there is more than one resolver between the Web browser and the authoritative server.)

Almost 10 % of the resolvers increase the very short TTLs (one minute).

#OARC40 #LoveDNS

The main use of #DNSSEC: creating topics for OARC meetings.

#troll #OARC40 #LoveDNS

"Guaranteeing the integrity of DNS records using PKIX Certificates" by Hyeonmin Lee

Still less than 1 % SLD signed.

Solution : use PKIK certificates because everyone has one.

#OARC40 #LoveDNS

Soon, we resume #OARC40 https://indico.dns-oarc.net/event/46/

#LoveDNS #DNS #DNSSEC

Preparing to speak remotely at #OARC40.
On Ubuntu, screen sharing in Zoom does not work with the default Wayland, but works with Xorg. But it is the opposite for virtual background :-)

End of the day for #OARC40. See you tomorrow!

#LoveDNS

Very funny domain: jiangxi.gov.cn Its nameserver replies over IPv6 but not over IPv4.

#DNS #OARC40

"DareShark: Detecting and Measuring Security Risks of Hosting-Based Dangling Domains" by Xiang Li, at #OARC40.

It's about domain name hijacking (I like his "use-after-free", it's basically the "subdomain attack").

#LoveDNS

The #OARC40 mascot.

"DNSCrypt Protocol: Current State and Planned Extensions" by Brian Somers at #OARC40

#dnscrypt is not dead yet?

"#DNSSEC is a collection of edge cases."

#OARC40

"Operational Experience with DNSSEC signed zones" by Shumon Huque : his experience at Salesforce (which also owns Heroku, Slack, etc)

#OARC40 #LoveDNS #DNSSEC

Post-quantum #DNSSEC may force us to drop UDP for #DNS. After all, we may have ADoT everywhere before we have PQ.

#OARC40

"Research Agenda for a Post-Quantum DNSSEC" by Andrew Fregly

I cannot find Schrödinger's cat on the first slide.

#OARC40 #DNSSEC

#OARC40 running!

#OARC40

#OARC40 starting in a few minutes.
https://indico.dns-oarc.net/event/46/
#LoveDNS #DNS