After weeks of extensive testing, The Swedish Internet Foundation has successfully completed a shift from NSEC3 to NSEC for the top-level domain .NU, being the first large operator to do so.
A comparative study between tools for validating the quality of DNS delegation shows that Zonemaster is a reliable and effective tool; ahead of alternatives like MXToolbox and NAST.
Zone files contain an awful lot of TTL values, and sometimes it is good to take a step back to see if what you've set up is still meaningful. We took a deeper look at our TTL values and it seems an extreme TTL makeover is called for.
Today, on April 23rd, The Swedish Internet Foundation launched a new, semi-automated, registry lock function, replacing the old manual registry lock service that has existed since 2013.
Two informative days has gotten The Swedish Internet Foundation acquainted with open source hardware security modules developed by CrypTech.
On the 16th of September the ICANN board made the final decision to go forward with the Key-Signing-Key (KSK) Rollover in the root zone. After an earlier roll got cancelled, it is now set in motion again.
The Swedish Internet Foundation and Afnic have released a new major release of Zonemaster on 2018-05-25. Zonemaster is a DNS (Domain Name System) validation tool which aims to improve the security and resilience of the internet infrastructure.
Increased robustness for critical municipal IT-services to prepare them for a major crisis, an update on the root KSK rollover and insight into the DNS architecture of Facebook were some of the topics at DNS reference group meeting in May.
The Swedish Internet Foundation was the first TLD to sign their zone, but eventually you come to a point where an overhaul is needed. This is what we learned from that process.
Most probably by now you are tired of all the talk about rolling the root KSK. Yes, we are too! So, today we are not going to talk about that one.
ns.se (former DNS Reference Group) is our forum where you can share knowledge and discuss questions about DNS. Join by signing up for the mailing list here.
