Net::DNS 0.78 released
Thu, 10 Jul 2014
Dnssec-Trigger 0.12 released
Thu, 22 May 2014
experimental package that provides DNSSEC on personal computers. Bug fixes, ip address change in default config, software update.Details
Net::DNS::SEC 0.18 released
Thu, 8 May 2012
NSD 4.0.3 released
Fri, 14 Mar 2014
NSD 4.0.2 released
Wed, 12 Mar 2014
Unbound 1.4.22 released
Wed, 12 March 2014
getdns 0.1.0 beta released
Wed, 26 Feb 2014
NSD 3.2.17 released
Mon, 27 Jan 2014
ldns 1.6.17 released
Fri, 10 Jan 2014
OpenDNSSEC 1.4.0 released
Mon, 22 April 2013
Version 1.4.0 of OpenDNSSEC has now been released. It includes
support for AXFR and IXFR, both input and output; HSM login; and more. Also
the Auditor is deprecated.
Credns 0.2.10 released
Fri, 22 Jun 2012
Software program aimed at fortifying DNSSEC by performing validation in the DNS notify/transfer-chain.Details
NLnet Labs Annual Report 2013
Wed, 27 MAy 2013
We are happy to present NLnet Labs Annual report 2013. In it
we present an overview of Labs' various activities and
describe their impact.
Annual Report 2013 (PDF)
Open Data Analysis to Retrieve Sensitive Information Regarding National-Centric Critical Infrastructures
Mon, 3 Feb 2014
Open Data repositories store a variety of information from country governments and private sectors. A concern is that with publishing data, sensitive information can be obtained by visual analytic techniques. The report shows that it is possible to retrieve precise locations where critical infrastructures overlap.
MSc. report (PDF)
Securing the last mile of DNS with CGA-TSIG
Tue, 8 Jan 2014
TSIG with shared keys is not scalable as a solution for the DNS last mile problem. CGA-TSIG extends TSIG with CGA so that
shared secrets are no longer required. This research investigates the CGA-TSIG proposal by doing a security analysis and
by making a PoC implementation in ldns.
MSc. report (PDF)
DNSSEC Audit Framework
Mon, 30 Dec 2013
In collaboration with SWITCH, the .CH and .LI registry, we have created a DNSSEC audit framework, that can be used to conduct a review of your or someone else's DNSSEC implementation.
NLnet Labs Strategic Plan 2014
Wed, 9 Oct 2013
This is the first time we post this type
of plan publicly. With this plan we intend to communicate
who we are and where we are going, it serves the NLnet Labs
Board and Staff but also the parties that support our
mission and want to contribute financially.
Experiences with MPTCP in an International OpenFlow Network
Tue, 3 Sep 2013
Keeping up with the network demand in order to transfer these data sets over the Internet is a challenge. Single links do not have enough capacity anymore. Therefore we need to install more interfaces in the servers and use all available paths in the network. In this paper we describe two new technologies that help to optimally use the capacity of all multiple paths simultaneously: OpenFlow and Multipath TCP (MPTCP).
TNC2013 paper (PDF)
Recent blog posts
Mon, 02 Jun 2014 by olaf
July 11 I will be leaving NLnet Labs to join the Internet Society as Chief Internet Technology Officer. During the last one-and half decade I have tried to push the needle to a more secure, resilient, and dependable Internet. For the last eight and a half years I did this at NLnet Labs by leading a ...
Thu, 01 May 2014 by wouter
Wouter Wijngaards en Olaf Kolkman Context At NLnet Labs we believe that DNSSEC allows for security innovations that will change the global security and privacy landscape. Innovations like DANE, a technology that allows people to use the global DNS to bootstrap a encrypted channel, are only the start of currently unimaginable technical innovation. The deployment ...
Fri, 21 Feb 2014 by benno
This blog post is based on the report “Open Data Analysis to Retrieve Sensitive Information Regarding National-Centric Critical Infrastructures” by Renato Fontana. Democratization of Public Data The ideas of Open Data comes from the concept that data should be freely available to use, reuse, and redistribute by anyone. An important motivation in making information available via ...
Tue, 24 Sep 2013 by benno
This blog post is based on the report “Discovery and Mapping of the Dutch National Critical IP Infrastructure” by Fahimeh Alizadeh and Razvan Oprea. Problem After the publication of the Critical Infrastructure Protection report more than ten years ago, the leading questions that emerge today are how critical infrastructure companies are interconnected, how resilient are these connections, ...