Domain Name System (DNS) - Internet Society We are a global charitable organization empowering people to keep the Internet a force for good: open, globally connected, secure, and trustworthy. Tue, 25 Nov 2025 14:36:23 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://www.internetsociety.org/wp-content/uploads/2017/09/cropped-ISOC-Symbol-Ground-navy-690px-1-32x32.jpg Domain Name System (DNS) - Internet Society 32 32 Internet Society Joins Leading Internet Advocates to Call on ISPs to Commit to Basic User Privacy Protections https://www.internetsociety.org/blog/2021/03/internet-society-joins-leading-internet-advocates-to-call-on-isps-to-commit-to-basic-user-privacy-protections/ Wed, 10 Mar 2021 14:00:00 +0000 https://www.internetsociety.org/?p=134501

Mozilla, the Electronic Frontier Foundation, and the Internet Society call on AT&T, T-Mobile, and Verizon to commit to limiting data collection and retention, and ensure transparency around how data is stored and used — including data sharing with business partners and affiliates for non-operational purposes.

The post Internet Society Joins Leading Internet Advocates to Call on ISPs to Commit to Basic User Privacy Protections appeared first on Internet Society.

]]>
DNS Privacy Frequently Asked Questions (FAQ) https://www.internetsociety.org/blog/2019/02/dns-privacy-frequently-asked-questions-faq/ Fri, 15 Mar 2019 14:00:51 +0000 https://www.internetsociety.org/?p=95288 We previously posted about how the DNS does not inherently employ any mechanisms to provide confidentiality for DNS transactions, and mentioned some of the protocols that have been recently developed to improve user privacy. To complement this, we are publishing our DNS Privacy Frequently Asked Questions (FAQ). This highlights and provides answers to the most important aspects […]

The post DNS Privacy Frequently Asked Questions (FAQ) appeared first on Internet Society.

]]>
Introduction to DNS Privacy https://www.internetsociety.org/blog/2019/02/dns-privacy-intro/ Thu, 14 Mar 2019 02:00:45 +0000 https://www.internetsociety.org/?p=95072 shield on green background

Almost every time we use an Internet application, it starts with a DNS (Domain Name System) transaction to map a human-friendly domain name to a set of IP addresses that can be used to deliver packets over the Internet. DNS transactions can therefore be correlated to the applications we use, the websites we visit, and […]

The post Introduction to DNS Privacy appeared first on Internet Society.

]]>
DNS Privacy & IPv6 Security @ APTLD 75 https://www.internetsociety.org/blog/2019/02/dns-privacy-ipv6-security-aptld-75/ Tue, 19 Feb 2019 07:36:35 +0000 https://www.internetsociety.org/?p=94764

The Internet Society will be actively contributing to the APTLD 75 meeting on 20-21 February 2019 in Dubai, United Arab Emirates. Our colleague Jan Žorž will not only be presenting on DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) during the DNS Operations, Security, and Privacy session (20 February, 11.30-12.30 UTC+4), but will then be presenting on IPv6 connectivity […]

The post DNS Privacy & IPv6 Security @ APTLD 75 appeared first on Internet Society.

]]>
DNS Flag Day https://www.internetsociety.org/blog/2019/02/dns-flag-day/ Fri, 08 Feb 2019 14:00:12 +0000 https://www.internetsociety.org/?p=94514

The 1st of February was DNS Flag Day, which is an initiative of several DNS vendors and operators to address the problems of DNS name server implementations that are not in compliance with long-established DNS standards. This is causing the DNS to not only be unnecessarily slow and inefficient, but prevent operators from deploying new […]

The post DNS Flag Day appeared first on Internet Society.

]]>
DNS-over-TLS in Linux (systemd) https://www.internetsociety.org/blog/2018/12/dns-privacy-in-linux-systemd/ Fri, 28 Dec 2018 01:00:51 +0000 https://www.internetsociety.org/?p=92395

Whilst we were putting together some content about DNS privacy recently, we learned that recent distributions of Linux ship with support for making DNS queries over TLS. We therefore decided to give Ubuntu 18.10 a try on a laptop. More recent versions of Ubuntu employ a special service for name resolution called ‘system-resolved.service(8)’. The configuration file […]

The post DNS-over-TLS in Linux (systemd) appeared first on Internet Society.

]]>
DNS-over-HTTPS (DoH) Support in Mozilla Firefox https://www.internetsociety.org/blog/2018/12/dns-privacy-support-in-mozilla-firefox/ Wed, 26 Dec 2018 01:00:51 +0000 https://www.internetsociety.org/?p=92356 Recent releases of Firefox have introduced the concept of DNS privacy under the name “Trusted Recursive Resolver”. Although Firefox ships with DNS-over-HTTPS (DoH) disabled by default, there has been some discussion within the Mozilla developer community about changing the default to “enabled”. Although DoH is somewhat controversial because it moves control plane (signalling) messages to the […]

The post DNS-over-HTTPS (DoH) Support in Mozilla Firefox appeared first on Internet Society.

]]>
DNS Security & Privacy discussed at e-AGE18 https://www.internetsociety.org/blog/2018/12/dns-security-privacy-discussed-at-e-age18/ Mon, 24 Dec 2018 01:00:55 +0000 https://www.internetsociety.org/?p=92493 The Internet Society continued its engagement with Middle East networking community by participating in the e-AGE18 Conference, where we took the opportunity to promote the importance of DNS Security and Privacy. The conference was held on 2-3 December 2018 at the Marriott Hotel in Amman, Jordan and was organised by the Arab States Research and Education […]

The post DNS Security & Privacy discussed at e-AGE18 appeared first on Internet Society.

]]>
IETF 103, Day 1: IPv6, TLS, DNS Privacy & Other Crypto https://www.internetsociety.org/blog/2018/11/ietf-103-day-1/ Sun, 04 Nov 2018 22:00:32 +0000 https://www.internetsociety.org/?p=90361

The Working Group sessions start tomorrow at IETF 103 in Bangkok, Thailand, and we’re bringing you daily blog posts highlighting the topics of interest to us in the ISOC Internet Technology Team. Only four days have been scheduled for the working groups this time around, which means there’s a lot of pack into each day; with […]

The post IETF 103, Day 1: IPv6, TLS, DNS Privacy & Other Crypto appeared first on Internet Society.

]]>
Rough Guide to IETF 103: DNSSEC, DNS Security and DNS Privacy https://www.internetsociety.org/blog/2018/11/rough-guide-to-ietf-103-dnssec-dns-security-and-privacy/ Fri, 02 Nov 2018 13:37:10 +0000 https://www.internetsociety.org/?p=90509

As happened earlier this year at IETF 102 in Montreal, DNS privacy will receive a large focus in the DNSOP, DPRIVE and DNSSD working groups. Given the critical role DNS plays as part of the “public core” of the Internet in linking names and identifiers to IP addresses, the DNS must have stronger security and privacy […]

The post Rough Guide to IETF 103: DNSSEC, DNS Security and DNS Privacy appeared first on Internet Society.

]]>
Are you ready? How to prepare for the DNSSEC Root KSK Rollover on October 11, 2018 https://www.internetsociety.org/blog/2018/10/are-you-ready-how-to-prepare-for-the-dnssec-root-ksk-rollover-on-october-11-2018/ Thu, 04 Oct 2018 20:23:39 +0000 https://www.internetsociety.org/?p=88213 skeleton key

Are you ready? Are your systems prepared so that DNS will keep functioning for your networks?  One week from today, on Thursday, October 11, 2018, at 16:00 UTC ICANN will change the cryptographic key that is at the center of the DNS security system – what we call DNSSEC. The current key has been in […]

The post Are you ready? How to prepare for the DNSSEC Root KSK Rollover on October 11, 2018 appeared first on Internet Society.

]]>
IETF 102, Day 4: DNS, IoT & TLS https://www.internetsociety.org/blog/2018/07/ietf-102-day-4/ Thu, 19 Jul 2018 07:00:58 +0000 https://www.internetsociety.org/?p=82996

This week is IETF 102 in Montreal, Canada, and we’re bringing you daily blog posts highlighting the topics of interest to us in the ISOC Internet Technology Team. Today we’re focusing on DNS, IoT and TLS issues. LPWAN is the first event of the day starting at 09.30 EDT/UTC-4. There will be a discussion relating to […]

The post IETF 102, Day 4: DNS, IoT & TLS appeared first on Internet Society.

]]>
IETF 102, Day 3: DNSSEC, DPRIVE & IoT https://www.internetsociety.org/blog/2018/07/ietf-102-day-3/ Wed, 18 Jul 2018 07:00:03 +0000 https://www.internetsociety.org/?p=82998

This week is IETF 102 in Montreal, Canada, and we’re bringing you daily blog posts highlighting the topics of interest to us in the ISOC Internet Technology Team. And today’s topics include DNS Security & Privacy, along with more IPv6 and IoT. The first DNSOP session will start at 09.30 EDT/UTC-4, and will continue on Thursday […]

The post IETF 102, Day 3: DNSSEC, DPRIVE & IoT appeared first on Internet Society.

]]>
ISOC’s Hot Topics at IETF 102 https://www.internetsociety.org/blog/2018/07/isocs-hot-topics-at-ietf-102/ Sat, 14 Jul 2018 06:00:23 +0000 https://www.internetsociety.org/?p=82450

The 102nd meeting of the IETF starts tomorrow in Montreal, Canada. This is will be the third time that an IETF has been held in the city, and tenth time in Canada – the first being way back in 1990. The ISOC Internet Technology Team is as always highlighting the latest IPv6, DNSSEC, Securing BGP, TLS and […]

The post ISOC’s Hot Topics at IETF 102 appeared first on Internet Society.

]]>
Rough Guide to IETF 102: DNSSEC, DNS Security and Privacy https://www.internetsociety.org/blog/2018/07/rough-guide-to-ietf-102-dnssec-dane-dns-security-and-privacy/ Fri, 13 Jul 2018 18:21:26 +0000 https://www.internetsociety.org/?p=82950 shield on green background

DNS privacy will receive a large focus in the latter half of the IETF 102 week with attention in the DPRIVE, DNSSD, and OPSEC working groups. In an interesting bit of scheduling (which is always challenging), most of the DNS sessions are Wednesday through Friday. As part of our Rough Guide to IETF 102, here’s a […]

The post Rough Guide to IETF 102: DNSSEC, DNS Security and Privacy appeared first on Internet Society.

]]>
A Deeper Dive Into Public DNS Resolver Quad9 https://www.internetsociety.org/blog/2018/07/a-deeper-dive-into-public-dns-resolver-quad9/ Fri, 06 Jul 2018 15:30:46 +0000 https://www.internetsociety.org/?p=82743

There are plenty of public DNS resolvers. The best known was Google Public DNS i.e. 8.8.8.8 and 8.8.4.4 for IPv4 and 2001:4860:4860::8888 and 2001:4860:4860::8844 for IPv6. But there are a few other options available now, each with different policies and technical features. Two new Public DNS resolvers were recently launched. Quad9 (launched Nov 2017) and […]

The post A Deeper Dive Into Public DNS Resolver Quad9 appeared first on Internet Society.

]]>
Watch Live On Monday, 25 June – DNSSEC Workshop at ICANN 62 in Panama https://www.internetsociety.org/blog/2018/06/watch-live-on-monday-25-june-dnssec-workshop-at-icann-62-in-panama/ Fri, 22 Jun 2018 20:03:06 +0000 https://www.internetsociety.org/?p=81629 ICANN 62 Panama image

With the DNSSEC Root Key Rollover coming up on October 11, how prepared are we as an industry? What kind of data can we collect in preparation? What is the cost benefit (or not) of implementing DANE? What can we learn from an existing rollover of a cryptographic algorithm? All those questions and more will […]

The post Watch Live On Monday, 25 June – DNSSEC Workshop at ICANN 62 in Panama appeared first on Internet Society.

]]>
SEE 7: Connectivity, Routing Security & IoT https://www.internetsociety.org/blog/2018/06/see-7-connectivity-routing-security-iot/ Sun, 17 Jun 2018 18:39:27 +0000 https://www.internetsociety.org/?p=81108

The 7th RIPE South-East Europe (SEE 7) meeting is being held on 18-19 June 2018 in Timisoara, Romania, and is focusing on several of the subjects of interest to the Internet Society. It’s also being chaired by our colleague Jan Žorž, whilst I’ll be talking about IoT Security and the OTA IoT Trust Framework. In Monday, there […]

The post SEE 7: Connectivity, Routing Security & IoT appeared first on Internet Society.

]]>
APNIC Labs/CloudFlare DNS 1.1.1.1 Outage: Hijack or Mistake? https://www.internetsociety.org/blog/2018/05/cloudflare-1-1-1-1-outage/ Thu, 31 May 2018 03:52:55 +0000 https://www.internetsociety.org/?p=80210

At 29-05-2018 08:09:45 UTC, BGPMon (A very well known BGP monitoring system to detect prefix hijacks, route leaks and instability) detected a possible BGP hijack of 1.1.1.0/24 prefix. Cloudflare Inc has been announcing this prefix from AS 13335 since 1st April 2018 after signing an initial 5-year research agreement with APNIC Research and Development (Labs) to offer […]

The post APNIC Labs/CloudFlare DNS 1.1.1.1 Outage: Hijack or Mistake? appeared first on Internet Society.

]]>
Call for Participation – ICANN DNSSEC Workshop at ICANN62, Panama City https://www.internetsociety.org/blog/2018/04/call-for-participation-icann-dnssec-workshop-at-icann62-panama-city/ Fri, 20 Apr 2018 18:29:39 +0000 https://www.internetsociety.org/?p=78131 ICANN 62

The DNSSEC Deployment Initiative and the Internet Society Deploy360 Programme, in cooperation with the ICANN Security and Stability Advisory Committee (SSAC), are planning a DNSSEC Workshop during the ICANN62 meeting held from 25-28 June 2018 in Panama City, Panama. If you are interested in participating, please send a brief (1-2 sentence) description of your proposed […]

The post Call for Participation – ICANN DNSSEC Workshop at ICANN62, Panama City appeared first on Internet Society.

]]>