dns

The article critiques common phishing vulnerabilities by highlighting how fragmented authentication flows and poor URL practices make it difficult for users to distinguish legitimate sites from scams, advocating for consistent domain usage to improve security.

The article argues that the Domain Name System (DNS) is being exploited for scams, with statistics showing a high rate of malicious domain registrations, posing a major internet security crisis.

Terence Eden cites an Interisle report indicating that 10–20% of newly registered gTLD domains in 2025 are fraudulent, with 8.5 million already blocklisted by May. The piece frames DNS as a major vector for cybercrime and notes ICANN's prolonged inaction on the issue.

This blog post explains how to enable reproducible deployments of MirageOS unikernels using Nix, integrating functional programming for safer and more efficient network applications like DNS servers.

The article explains how to obtain a free domain under ip6.arpa by using Hurricane Electric's Tunnelbroker and setting up DNS records with deSEC, demonstrating a method to exploit reverse DNS lookups for personal use.

The article discusses omnipresent availability risks in cloud software, covering common failure areas like saturation, networking, and security, with examples from major incidents.

Cloudflare optimized their 1.1.1.1 DNS cache to reduce memory usage by over 50%, saving 100 terabytes of memory while improving performance through refined Rust data structures.

AWS launches Route 53 Files, a new file system that allows direct editing of DNS records using standard UNIX tools with automatic synchronization to Route 53 hosted zones.

Namecheap is experiencing a major outage due to a power failure at its Phoenix data center, affecting web hosting, websites, DNS, and email services. Emergency maintenance is underway.

A new DNS TXT record convention, defined by RFC 10023, allows domain owners to signal that their domain is for sale without disrupting their live site, with support for price and contact tags.

This article explains Discovery of Designated Resolvers (DDR), a protocol that lets devices automatically discover encrypted DNS endpoints. It describes how the query works, how resolvers respond, and the limitations of opportunistic upgrades from plain DNS.

A comprehensive technical reference for SPF record syntax per RFC 7208, covering mechanisms, qualifiers, modifiers, macros, and evaluation rules.

Explains what DMARC actually protects against, clarifying its narrow scope relative to SPF and DKIM, and why it is not a spam or phishing filter.

A CipherCue analysis of 67,336 domains finds that 68.4% still do not enforce DMARC, despite the standard being public since 2012, with many domains stuck in monitoring mode due to the difficulty of authenticating all legitimate email sources.

The author red-teamed their sandbox for running untrusted AI code and found that everything held except DNS, indicating a potential vulnerability.

A blog post by Georg Lukas detailing how to set up an authoritative dnsmasq container on a MikroTik RouterOS device for dual use as authoritative DNS and forwarding cache, with considerations for flash storage and container configuration.

This paper proposes ToolDNS, a framework that retrofits semantic tool discovery onto the DNS infrastructure, achieving scalable O(log N) resolution and reducing search space by 95.26% on a benchmark of over 33,000 real-world tools across multiple protocols.

A blog post explaining how to configure SSH to automatically use a bastion host only when the target hostname is not resolvable locally, using the Match directive and getent command.

A heap buffer overflow vulnerability in Dnsmasq (CVE-2026-2291) allows remote code execution via a malicious upstream DNS server. The issue was introduced in version 2.73 and fixed in 2.92rel2 and 2.93.

Vint Cerf is advising Innovation Labs on developing an open standard (DNSid) for identifying and auditing AI agents on the open internet, aiming to create accountability and interoperability as autonomous agents become more prevalent.