• Solving the decade-old problem with Multi-Signer DNSSEC

    The Swedish Internet Foundation has for the last couple of months been working together with Shumon Huque of Salesforce, and the Internet pioneer Steve Crocker. Together they are solving the problem with multi-signer DNSSEC.

  • Zonemaster validates reliably

    A comparative study between tools for validating the quality of DNS delegation shows that Zonemaster is a reliable and effective tool; ahead of alternatives like MXToolbox and NAST.

  • Time To Die for TTL

    Zone files contain an awful lot of TTL values, and sometimes it is good to take a step back to see if what you've set up is still meaningful. We took a deeper look at our TTL values and it seems an extreme TTL makeover is called for.

  • DNS' best friends

    Two informative days has gotten The Swedish Internet Foundation acquainted with open source hardware security modules developed by CrypTech.

  • Critical IT-services in focus at the DNS reference group

    Increased robustness for critical municipal IT-services to prepare them for a major crisis, an update on the root KSK rollover and insight into the DNS architecture of Facebook were some of the topics at DNS reference group meeting in May.

  • Monitoring of IIS Anycast

    In January 2017 The Swedish Internet Foundation started a new service "IIS Anycast". We offer our registrars a secondary DNS. We do this in cooperation with CIRA (the Canadian ccTLD Registry). Our secondary DNS is a DNS anycast network.

  • Summer fun with a DNS resolver

    On my way back home from the IETF93 meeting in Prague I decided to do a small summer project. For a long time I have wanted to run my own DNS resolver. Lately I had considered to run it on my Synology NAS. But my NAS is already stretched by all the applications running. So I decided to use one of my Raspberry Pi's to do the job. Now, after some runs of the washing machine, I am ready to go.