VERISIGN’s Post

A panel discussion on encrypted #DNS and resolver discovery was the main focus of our call this week, taking place just over a year since the two main resolver discovery standards were published: * Discovery of Designated Resolvers (DDR – RFC 9462) * DHCP and Router Advertisement Options for the Discovery of Network-designated Resolvers (DNR – RFC 9463) * And the related Service Binding Mapping for DNS Servers (RFC 9461) Tiru Reddy of Nokia and Neil Cook of PowerDNS two of the authors of the DNR document, joined the discussion, along with John Todd of Quad9 DNS and David Redekop of ADAMnetworks®. You can catch the discussion at https://lnkd.in/exkukWbp Message me if you’d like an invitation to join future calls.

What is DNS? DNS or Domain Name System is one of the most important aspects of the internet and has helped shape how we know it today. It's a lot like a phonebook for the internet. It is a large network of servers located across the globe that contain a distributed database of domain names and IP addresses. It's responsible for matching the right domain name with its corresponding IP address. #cyberdefense

Can anyone at CrowdStrike confirm they are seeing this problem? For all those dealing with crowdstrike. Today my team discovered that a large majorty of our servers are now running out of space, we discovered a locked memory dump file. Some as small as 4G one as large as 67G. Only way to clear it out is in safe mode or to uninstall crowdstrike, remove the dump file and then reinstall the agent.

Encountering "dns_probe_finished_nxdomain"? It often means your computer can't find the server it's trying to reach. Simple fixes include: 1) Clearing your browser's cache. 2) Restarting your modem or router. 3) Changing your DNS server. Get a more detailed guide at https://rho.st/4d0u2

"The flow uses a documented execution hijack of IE4uinit. By supplying a “side-loaded” .inf file to IE4uinit, it can be used to load and execute COM scriptlets (SCT) from remote servers. In this case it was observed reaching out to the URL: hxxp://a92837f.johnshimkus[.]com/setthevar" 🌟New report out Monday, December 2nd by @_pete_0, Zach Stanford and guest contributor Kelsey Merriman from Proofpoint! 📬 Want to be the first to know? Subscribe for updates: https://lnkd.in/gqbSfvTh

Here is a snippet of my upstream server configuration from my AdGuard Home instance. It uses HTTP/3 supported DNS-over-HTTPS providers, allowing for encrypted DNS lookups, with an average proccessing time of 43ms. #adguard #dns #homelab

excellent guide on setting up your own DNS DHCP server some history and some use case and cited very well. https://lnkd.in/evJRCYBa https://lnkd.in/evJRCYBa

For anyone managing public servers that did not see the latest news, there is a nasty openssh vulnerability being exploited that allows RCE. Upgrade to a patched version or set `LoginGraceTime 0` as a temporary fix on your sshd_config. #cve #sysadmin #devsecops

🌐 Introducing Planisys Authoritative DNS Service 🌐 At Planisys, we take reliability and redundancy seriously. Our Authoritative DNS Service is powered by two robust name servers: globaldns1.planisys.net and globaldns2.planisys.io. What sets us apart? These name servers are anchored in different registrars, providing added security and independence. Additionally, they are strategically located in different networks, IP address ranges, and diverse geographic locations within the United States, ensuring unparalleled resilience and performance. Trust Planisys to deliver a DNS service that’s built for maximum uptime and reliability, no matter the challenge. 💪 #DNS #Planisys #Networking #Reliability #Redundancy

With this new encryption method, servers do not decrypt the query or even have access to the decryption key, so client data remains private throughout the process. https://lnkd.in/eeA-YJuF