Re: Executive Order 14144 - encrypted DNS

2025-01-27 Thread Carlos Horowicz via bind-users
DoT instead of plaintext UDP/53 , but also zone transfers over the Internet encrypted with TLS (thus the reference to certificates). -Carlos On 27/01/2025 14:02, Carlos Horowicz via bind-users wrote: IMHO this has nothing to do with DNSSEC, it sounds more like the urge to encrypt resolver

Re: Executive Order 14144 - encrypted DNS

2025-01-27 Thread Carlos Horowicz via bind-users
IMHO this has nothing to do with DNSSEC, it sounds more like the urge to encrypt resolver traffic (I guess they're referring to DoT) On 27/01/2025 13:55, Marc wrote: FYI - EO 14144 has the following provision related to encrypting DNS: (c) Encrypting Domain Name System (DNS) traffic in transit

Re: Question about post-quantum X25519Kyber768

2025-01-02 Thread Carlos Horowicz via bind-users
n Internet Draft — there is a helpful page here: https://authors.ietf.org/en/home <https://authors.ietf.org/en/home> . W Robert Wagner *From:* bind-users on behalf of Carlos Horowicz via bind-users *Sent:* Thu

Question about post-quantum X25519Kyber768

2025-01-02 Thread Carlos Horowicz via bind-users
Hi there, does anyone know of the bind developers thinking of incorporating post-quantum cryptography into bind9 , like Cloudflare with X25519Kyber768 on BoringSSL ? I'm just curious about if there are thoughts or ongoing work, or if this is in the near roadmap at all. Thank you, Carlos H

Re: views-based RPZ

2024-08-26 Thread Carlos Horowicz via bind-users
Petr Špaček Internet Systems Consortium What sort of QPS are each of your servers handling? Cheers, Greg On Sun, 25 Aug 2024 at 05:27, Grant Taylor via bind-users mailto:bind-users@lists.isc.org>> wrote:     On 8/24/24 07:37, Carlos Horowicz via bind-users wrote: > 2. if RPZ re

Re: views-based RPZ

2024-08-24 Thread Carlos Horowicz via bind-users
rver first. Hope that helps. Cheers, Greg On Fri, 23 Aug 2024 at 20:43, Carlos Horowicz via bind-users wrote: Hello List, an ISP has brought a case where several customers do not agree with our web interface portal that lets select different RPZ zones to be activated fo

views-based RPZ

2024-08-23 Thread Carlos Horowicz via bind-users
Hello List, an ISP has brought a case where several customers do not agree with our web interface portal that lets select different RPZ zones to be activated for a set of resolvers that are common to all customers. They even belong to different countries where some domains are banned. Given t

views-based RPZ

2024-08-23 Thread Carlos Horowicz via bind-users
Hello List, an ISP has brought a case where several customers do not agree with our web interface portal that lets select different RPZ zones to be activated for a set of resolvers that are common to all customers. They even belong to different countries where some domains are banned. Given