• 4 min read
DNS has been in use on the Internet for more than 30 years — now it is time for its worldwide maintenance that shall, for the first time in the existence of DNS, require coordinated actions from all operators of DNS servers and DNSSEC validators. What actions do you need to take to survive?
Rene Wilhelm is a senior research engineer in the R&D department at the RIPE NCC. Coming from a background in particle physics, Rene joined the RIPE NCC in 1996. His interests are in data analysis, routing, Internet measurements and visualisation. More
• 12 min read
On 25 September 2018, the RIPE NCC passed the milestone of 20,000 Local Internet Registries (LIRs). We look at what's happened since the previous milestone of 15,000 LIRs and share our thoughts about the future: how much time is left for the IPv4 pool, and what are the prospects for membership deve…
Based in Amsterdam
At the time of writing articles listed here, Massimo Candela was Senior Software Engineer with R&D at the RIPE NCC, working mainly on developing web applications that provide a visual and interactive representation of large amounts of network data. Tools he played a key role in developing are go-to resources … More
• 6 min read
Upstream Visibility is the new tool produced by the Computer Network Research Group of Roma Tre in collaboration with the RIPE NCC. It is a web application which proposes a concise way of visualising interdomain routing data of a specified prefix.
Based in Amsterdam, The Netherlands
I wrote the articles collected here during my time as community builder of the RIPE NCC and the maintainer and editor of RIPE Labs. I have since taken on a new role serving as the Chair of the RIPE Community. You can reach my new profile via the website link … More
• 5 min read
Following up from an earlier article, Veronika McKillop, network architect at Microsoft, describes how the organisation is making progress towards an IPv6-only network.
Based in France
Baptiste is currently a PhD student at Grenoble Alps University, where he works on improving transport protocols from the end-user perspective. He is also active in a local community network (member of the Fédération FDN) that builds and operates network infrastructure as a common. His interests encompass the design of … More
• 10 min read
For decades, the Domain Name System (DNS) has relied on UDP as its transport protocol of choice, mostly because of its simplicity. New transports such as DNS-over-TLS and DNS-over-HTTPS are now gaining popularity: they offer increased privacy while preventing the use of the DNS as a DDoS attack vec…
Rogier Spoor, manager at SURFnet and innovator pur sang. During his student days in 1997, co-founder of the traveling DNA lab that was subsequently adopted nationally. At SURFnet, in 2004 Rogier developed SURFids, a distributed detection system that was an international success. In addition, Rogier has been at the cradle … More
• 3 min read
Going online on unknown Internet hotspots - whether at a restaurant, an airport or in a restaurant - isn't actually very safe or secure for users. This is due to the open character of hotspots which makes it easy to impersonate legitimate hotspots and eavesdrop on traffic - or even serve malware. T…
Based in Hengelo
I am a PhD student in the Design and Analysis of Communication Systems (DACS) group at the University of Twente. My current research area is the optimization of anycast catchments, specifically to improve resilience against Distributed Denial-of-Service (DDoS) attacks. More
• 5 min read
In 2009, Google launched its Public DNS service, with its characteristic IP address 8.8.8.8. Since then, this service has grown to be the largest and most well-known DNS service in existence. Due to the centralisation that is caused by public DNS services, large content delivery networks (CDNs), su…
Willem Toorop is a developer and researcher at NLnet Labs. NLnet Labs is a non-profit research lab dedicated to the development of Open Source software and open standards for the benefit of the Internet. NLnet Labs mission is to provide globally recognized innovations and expertise for those technologies that turn … More
• 11 min read
Is DNSSEC still needed when you get your DNS over TLS? DNSSEC's original design goals could also be met in a future DoT-only world. However, DNSSEC's aspirations have moved on with DANE. Unfortunately DNSSEC and DANE are hardly ever available at end-user devices. DoT brings liable delivery of DNS, …
Based in Chicago
I am one of the founders and the managing director of Diamond Key Security, a not-for-profit set whose educational, charitable, and scientific purposes include facilitating initiatives to enhance the security and stability of the Internet. More
• 4 min read
The main goal of CrypTech is to create an open-source design for a hardware cryptographic engine for Hardware Security Modules (HSMs). At the same time it also provides a associated reference implementation that allows anyone to develop, deploy and audit a secure, low-cost cryptographic engine in t…
Martin Winter is a technical lead and cofounder of the Network Device Education Foundation and he works on the side for Hurricane Electric Internet Services as a Researcher on the RT-BGP (Real-Time BGP) Toolkit. His research interests include routing protocols, platforms, networked systems, and software engineering as well as OpenSourceRouting, … More
• 5 min read
There are many flavours of BGP hijacks, misconfigurations or outdated implementations. Here are some examples and tips how to verify your announcements.
