Glowing neon light streaks cascade downward in shades of blue, cyan, and red against a dark blue gradient.

What a Decade of DNS Query Data Tells Us About the Next Algorithm Transition

• By • Security

Every month, top-level domain (TLD) registry operators submit activity reports to the Internet Corporation for Assigned Names and Numbers (ICANN). Among other fields, these reports record the number of Domain Name System (DNS) queries each registry received over UDP and TCP transport mechanisms. Because the reports are collected and made public, they offer something the DNS community rarely gets: a consistent, long-running longitudinal, cross-registry view of query traffic that is reported by the operators themselves.

(more…)
A digital blue tree on a gradient blue background.

Verisign Provides Open Source Implementation of Merkle Tree Ladder Mode

• By • Security

The quantum computing era is coming, and it will change everything about how the world connects online. While quantum computing will yield tremendous benefits, it will also create new risks, so it’s essential that we prepare our critical internet infrastructure for what’s to come. That’s why we’re so pleased to share our latest efforts in this area, including technology that we’re making available as an open source implementation to help internet operators worldwide prepare.

(more…)
binary digits on a gradient blue background

Next Steps in Preparing for Post-Quantum DNSSEC

• By • Security

In 2021, we discussed a potential future shift from established public-key algorithms to so-called “post-quantum” algorithms, which may help protect sensitive information after the advent of quantum computers. We also shared some of our initial research on how to apply these algorithms to the Domain Name System Security Extensions, or DNSSEC. In the time since that blog post, we’ve continued to explore ways to address the potential operational impact of post-quantum algorithms on DNSSEC, while also closely tracking industry research and advances in this area.

(more…)