#dns

On October 11, 2026, the DNS root zone switched from KSK-2017 to KSK-2024, only the second root key rollover in history. The slow-motion mechanism, the RFC 8509 sentinel trick, and how to check your own resolver.

NextDNS is a configurable DNS resolver with filtering, logging, and privacy controls. When combined...

Publish each mail record as the type its consumer requires, and make that type explicit in...

Every DNS lookup in my k3s cluster was appending 'home.lan' and recursing externally. I blamed DHCP, wrote a Terraform fix, and watched the plan show zero diff. The real source was three layers up.

Building Pig365: How an Elementary Student Built a Web Ecosystem and Explores Dual-Root IDN...

A domain can look harmless today while its history tells a different story. A website might have...

A Kubernetes cluster and an HA design won't save you when DNS or the network goes down. Here's how we built failover into Web-Engine Sentry's verification services at every layer, from DNS to the database.

In July 2024 I sat in a training room in Nusa Dua with a laptop and too many DNS diagrams. PANDI, the...

A security engineer and PANDI .id Academy trainer heading to ICANN87 in Bali, and what I want to learn about DNS abuse, DNSSEC and AI agents.

You wrote the email, picked the list, and hit send. A week later the replies are near zero and you...

A changed DNS record can still resolve, so uptime checks stay green. Watch the exact record set and get an alert when a record is added, removed or changed.

Two new x402 APIs for AI agents (cycle 148) Shipped today to...