DNSSEC Algorithm Change for .COM/.NET/.EDU

2023-09-05 (Updated: 2023-09-06 )

Verisign, the operator of the registries for the COM, NET, and EDU top level domains, is rolling the cryptographic algorithm used to DNSSEC sign all three of their registries.

Migrating DNSSEC Zones to KnotDNS

2023-01-05 (Updated: 2023-01-05 )

I’ve seen more than a few questions on mailing lists and on chat servers about migrating DNSSEC-signed zones between different server software. These are the steps I used to migrate a number of signed zones to Knot from BIND.

On Securing the DNS

2009-06-02 (Updated: 2009-06-02 )

The .org TLD has been DNSSEC signed! And I got to flip the switch.