Re: Executive Order 14144 - encrypted DNS

2025-01-28 Thread Michael De Roover
On Monday, 27 January 2025 13:26:06 CET Robert Wagner wrote: > FYI - EO 14144 has the following provision related to encrypting DNS: > > (c) Encrypting Domain Name System (DNS) traffic in transit is a critical > step to protecting both the confidentiality of the information being > transmitted to

Re: Executive Order 14144 - encrypted DNS

2025-01-28 Thread Michael De Roover
On Monday, 27 January 2025 14:05:42 CET Stephane Bortzmeyer via bind-users wrote: > On Mon, Jan 27, 2025 at 12:55:08PM +, > Marc wrote > > a message of 36 lines which said: > > What is this referring to DNSSEC? > > The way I understand it, it is referring to DoH and DoT. > > > What is th

Re: Executive Order 14144 - encrypted DNS

2025-01-28 Thread Mark Andrews
You can validate all you want but you need to sign your zones and all the targets of the CNAME chains from your zones for DNSSEC to be effective. This is paying lip service to sign your zones directive. % dig www.dhs.gov +dnssec ;; BADCOOKIE, retrying. ; <<>> DiG 9.21.3-dev <<>> www.dhs.gov +dnss

RE: Survey on the impact of software regulation on DNS systems

2025-01-28 Thread Marc
> > Did you know that there is significant momentum building to regulate > software, including open source, in at least Europe and the US (and > possibly elsewhere as well), in order to improve cybersecurity? Do you > think this regulation will improve cybersecurity for your operations? > What are

Re: Survey on the impact of software regulation on DNS systems

2025-01-28 Thread Victoria Risk
Aaaand, somehow the link to the survey didn’t end up in the email, so here it is: https://ec.europa.eu/eusurvey/runner/SSAC-open-source-software-in-DNS-and-registration-infrastructure Sorry! Vicky > On Jan 28, 2025, at 12:26 PM, Victoria Risk wrote: > > Hello BIND users- > > Did you know t

Survey on the impact of software regulation on DNS systems

2025-01-28 Thread Victoria Risk
Hello BIND users- Did you know that there is significant momentum building to regulate software, including open source, in at least Europe and the US (and possibly elsewhere as well), in order to improve cybersecurity? Do you think this regulation will improve cybersecurity for your operations