
DNSSEC adoption remains modest, with only 36 % of resolvers validating and 7 % of domains securely delegated in 2025, hampered by complex enrollment and manual key‑rollovers. Automation using authenticated CDS/CDNSKEY records can eliminate these hurdles, and several European ccTLDs have already demonstrated reliable DS‑record automation. However, gTLDs cannot adopt the same workflow without ICANN approval, prompting the DNSOP Working Group to draft best‑practice guidelines. The upcoming RFC aims to standardize safety checks, notifications, and lock handling to enable safe, automated DNSSEC deployment at scale.
At APNIC 61’s Policy SIG in Jakarta, members debated two pivotal proposals: prop‑164, which would lower the minimum IPv6 allocation from a /32 to a /36, and prop‑168, which seeks to raise the maximum IPv4 delegation for account holders to a...
Flavio Luciani and John Souter’s new analysis shows the global peering market is not contracting but evolving. While mature regions exhibit modest dips in ASN counts, overall IXP capacity continues to rise, driven by traffic consolidation and the growth of...

Researchers have identified transparent DNS forwarders as a potent, overlooked vector for reflective amplification attacks. Unlike traditional open resolvers, these forwarders relay queries without rewriting source IPs, allowing attackers to exploit shielded recursive resolvers and bypass rate‑limiting controls. Weekly Internet‑wide...

The IETF‑ratified Registration Data Access Protocol (RDAP) has entered a rapid growth phase after the mandatory whois sunset on 28 January 2025. Who‑is queries fell 60 % while RDAP queries surged from 7 billion to 65 billion per month, overtaking whois by June 2025. Adoption now...