<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>DNSSEC &#8211; Noise</title>
	<atom:link href="https://noise.getoto.net/tag/dnssec/feed/" rel="self" type="application/rss+xml" />
	<link>https://noise.getoto.net</link>
	<description>The collective thoughts of the interwebz</description>
	<lastBuildDate>Tue, 06 Oct 2026 17:50:11 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.3</generator>
	<item>
		<title>The keys to the Internet change on October 11. Are you ready?</title>
		<link>https://noise.getoto.net/2026/10/06/the-keys-to-the-internet-change-on-october-11-are-you-ready/</link>
		
		<dc:creator><![CDATA[Sebastiaan Neuteboom]]></dc:creator>
		<pubDate>Tue, 06 Oct 2026 17:50:11 +0000</pubDate>
				<category><![CDATA[1.1.1.1]]></category>
		<category><![CDATA[Cryptography]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[DNSSEC]]></category>
		<category><![CDATA[reliability]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=f4ea0cdbc2e10eaa5700e34d4bf11ef9</guid>

					<description><![CDATA[On October 11, 2026, the DNS root switches to a new key-signing key (KSK-2024). Learn what this means for you, and how RFC 8509 trust anchor sentinels allow you to test whether your DNS resolver is ready for the rollover.]]></description>
		
		
		<enclosure url="https://blog.cloudflare.com/_emdash/api/media/file/01M490CTJ7YDMNAYZRST2FH35F.png" length="0" type="image/png" />

			</item>
		<item>
		<title>1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it</title>
		<link>https://noise.getoto.net/2026/09/10/1-1-1-1-now-supports-post-quantum-dnssec-all-2420-bytes-of-it/</link>
		
		<dc:creator><![CDATA[Sebastiaan Neuteboom]]></dc:creator>
		<pubDate>Thu, 10 Sep 2026 13:00:00 +0000</pubDate>
				<category><![CDATA[1.1.1.1]]></category>
		<category><![CDATA[Cryptography]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[DNSSEC]]></category>
		<category><![CDATA[post quantum]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[security]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=cb799dbcd7146cfdb725e90c11a64aa2</guid>

					<description><![CDATA[1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.]]></description>
		
		
		<enclosure url="https://blog.cloudflare.com/_emdash/api/media/file/01M25DK32HZ1WQH3H12JRZ8W35.01M25DK70WYHHWWR2VQYE94TNP.png" length="0" type="image/png" />

			</item>
		<item>
		<title>A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed</title>
		<link>https://noise.getoto.net/2026/07/14/a-broken-dnssec-rollover-took-down-al-now-1-1-1-1-tells-you-when-validation-is-bypassed/</link>
		
		<dc:creator><![CDATA[Sebastiaan Neuteboom]]></dc:creator>
		<pubDate>Tue, 14 Jul 2026 13:00:00 +0000</pubDate>
				<category><![CDATA[1.1.1.1]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[DNSSEC]]></category>
		<category><![CDATA[Post Mortem]]></category>
		<category><![CDATA[reliability]]></category>
		<category><![CDATA[standards]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=2c557b12e7a2181813b16f91782a6892</guid>

					<description><![CDATA[When a failed DNSSEC key rollover took down the .AL TLD, we deployed a Negative Trust Anchor to restore resolution. This time, though, clients didn't have to take our word for it: 1.1.1.1 returned EDE 33, a new DNS error code that signals directly in the response that DNSSEC validation was bypassed.]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>When DNSSEC goes wrong: how we responded to the .de TLD outage</title>
		<link>https://noise.getoto.net/2026/05/06/when-dnssec-goes-wrong-how-we-responded-to-the-de-tld-outage/</link>
		
		<dc:creator><![CDATA[Sebastiaan Neuteboom]]></dc:creator>
		<pubDate>Wed, 06 May 2026 17:00:00 +0000</pubDate>
				<category><![CDATA[1.1.1.1]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[DNSSEC]]></category>
		<category><![CDATA[Outage]]></category>
		<category><![CDATA[reliability]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=6b1ded77824a78a21537907b5de72a3a</guid>

					<description><![CDATA[On May 5, 2026, DENIC published broken DNSSEC signatures for the .de TLD, making millions of domains unreachable. Here's what 1.1.1.1 saw, how serve stale cushioned the impact, and how we restored resolution.]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Some TXT about, and A PTR to, new DNS insights on Cloudflare Radar</title>
		<link>https://noise.getoto.net/2025/02/27/some-txt-about-and-a-ptr-to-new-dns-insights-on-cloudflare-radar/</link>
		
		<dc:creator><![CDATA[David Belson]]></dc:creator>
		<pubDate>Thu, 27 Feb 2025 14:00:00 +0000</pubDate>
				<category><![CDATA[1.1.1.1]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[DNSSEC]]></category>
		<category><![CDATA[doh]]></category>
		<category><![CDATA[Radar]]></category>
		<category><![CDATA[Resolver]]></category>
		<category><![CDATA[Traffic]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=4b1d372effbdcf963aef149e589b0db4</guid>

					<description><![CDATA[The new Cloudflare Radar DNS page provides increased visibility into aggregate traffic and usage trends seen by our 1.1.1.1 resolver]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Remediating new DNSSEC resource exhaustion vulnerabilities</title>
		<link>https://noise.getoto.net/2024/02/29/remediating-new-dnssec-resource-exhaustion-vulnerabilities/</link>
		
		<dc:creator><![CDATA[Vicky Shrestha]]></dc:creator>
		<pubDate>Thu, 29 Feb 2024 14:00:57 +0000</pubDate>
				<category><![CDATA[1.1.1.1]]></category>
		<category><![CDATA[CVE-2023-50387]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[DNSSEC]]></category>
		<category><![CDATA[KeyTrap]]></category>
		<category><![CDATA[NSEC3]]></category>
		<category><![CDATA[Resolver]]></category>
		<category><![CDATA[vulnerabilities]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=ec1786fc8f5b958667e52bda155d8925</guid>

					<description><![CDATA[Cloudflare recently fixed two critical DNSSEC vulnerabilities: CVE-2023-50387 and CVE-2023-50868. Both of these vulnerabilities can exhaust computational resources of validating DNS resolvers. These vulnerabilities do not affect our Authoritative DNS or DNS firewall products]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Connection errors in Asia Pacific region on July 9, 2023</title>
		<link>https://noise.getoto.net/2023/07/11/connection-errors-in-asia-pacific-region-on-july-9-2023/</link>
		
		<dc:creator><![CDATA[Christian Elmerot]]></dc:creator>
		<pubDate>Tue, 11 Jul 2023 08:48:13 +0000</pubDate>
				<category><![CDATA[DNS]]></category>
		<category><![CDATA[DNSSEC]]></category>
		<category><![CDATA[Outage]]></category>
		<category><![CDATA[Post Mortem]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=606cb966052e3bcfcea0bc7e8b241937</guid>

					<description><![CDATA[On July 9, 2023, users in the Asia Pacific region experienced connection errors due to origin DNS resolution failures to .com and .net TLD nameservers]]></description>
		
		
		<enclosure url="http://blog.cloudflare.com/content/images/2023/07/image2-4.png" length="0" type="" />

			</item>
		<item>
		<title>DNSSEC issues take Fiji domains offline</title>
		<link>https://noise.getoto.net/2022/03/09/dnssec-issues-take-fiji-domains-offline/</link>
		
		<dc:creator><![CDATA[David Belson]]></dc:creator>
		<pubDate>Wed, 09 Mar 2022 10:11:24 +0000</pubDate>
				<category><![CDATA[Cloudflare Radar]]></category>
		<category><![CDATA[DNSSEC]]></category>
		<category><![CDATA[Fiji]]></category>
		<category><![CDATA[Internet Traffic]]></category>
		<category><![CDATA[Outage]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=c5e0c6dd9d7f8fb44dda802ea0d4dd27</guid>

					<description><![CDATA[DNSSEC issues with the .fj ccTLD caused problems reaching websites on the island nation]]></description>
		
		
		<enclosure url="http://blog.cloudflare.com/content/images/2022/03/image2-7.png" length="0" type="" />

			</item>
	</channel>
</rss>

<!--
Performance optimized by W3 Total Cache. Learn more: https://www.boldgrid.com/w3-total-cache/?utm_source=w3tc&utm_medium=footer_comment&utm_campaign=free_plugin

Object Caching 20/94 objects using Memcached
Page Caching using Disk: Enhanced 
Lazy Loading (feed)
Database Caching using Memcached

Served from: noise.getoto.net @ 2026-10-27 19:12:01 by W3 Total Cache
-->