Incremental #DNSSEC signing for Cascade is coming along nicely, now also supporting NSEC3. #DNS #OpenSource #rustlang https://github.com/NLnetLabs/dnst/commit/0d3cc116f903a801653df0acdab8eaf448301a86
Michał "rysiek" Woźniak · 🇺🇦
boosted
The latest Quad9 Trends report with insights from our Director of #ThreatIntel for H2 2025 👉 https://quad9.net/news/blog/trends-h2-2025-cyber-insights/
The latest Quad9 Trends report with insights from our Director of #ThreatIntel for H2 2025 👉 https://quad9.net/news/blog/trends-h2-2025-cyber-insights/
Which Prometheus metrics would you like to see in our #DNSSEC signer Cascade? #DNS #OpenSource https://community.nlnetlabs.nl/t/selecting-the-promtheus-metrics-exposed-by-cascade/70
Djoerd Hiemstra 🍉
and 2 others
boosted
In our journey to #DigitalSovereignty, here's where we are:
- Domain registration: TransIP and Prolocation 🇳🇱
- Email, calendar, collaborative writing, and more: mailbox.org 🇩🇪
- Document store: Tresorit 🇨🇭
- Critical infra hosting: Hetzner 🇩🇪
- Discourse hosting: Communiteq 🇳🇱
- Security: 1Password.eu 🇨🇦/🇪🇺 and Yubico 🇸🇪
Next up: GitHub —> Codeberg 🇩🇪
To-do: Slack —> Zulip, Matrix, Mattermost?
NLnet Labs
boosted
Good morning, Brussels!
Second day of #FOSDEM https://fosdem.org/2026/
ajuvo ✔
and 1 other
boosted
Stellt euch vor, eine private Organisation aus milliardenschweren Konzernen entscheidet, welche #Webseiten ihr nicht besuchen dürft - ohne #Richter, ohne öffentliche Kontrolle oder #Transparenz.
Genau das macht die CUII in #Deutschland seit Jahren.
In Deutschland entscheidet eine private Organisation aus #Internetanbietern und großen #Unterhaltungskonzernen, welche #Webseiten für den Großteil der #Bevölkerung nicht mehr erreichbar sind.
Die selbsternannte "Clearingstelle #Urheberrecht im #Internet" sperrt ohne richterliche Beschlüsse den Zugriff auf Hunderte von #Domains.
Wir haben daraufhin *cuiiliste.de* ins Leben gerufen, um die geheim gehaltene Liste von Domains zu veröffentlichen und so mehr Transparenz in die heimliche #Zensur der #Konzerne zu bringen.
Fast ein Drittel der gesperrten Domains erfüllte – teils seit Jahren – nicht mehr die Kriterien für eine Sperre.
( Privaten DNS verwenden )
https://media.ccc.de/v/39c3-cuii-wie-konzerne-heimlich-webseiten-in-deutschland-sperren
🕵️♀️ In our recursive resolver Unbound many of you depend on Response Policy Zones (RPZ), allowing you to customize #DNS responses to for example block malicious domains or phishing sites.
⚡️ With very large RPZ zones, this could be slow. To solve this, we have brought our SIMD capable zone file parser for NSD to Unbound. This is now ready for review.
https://github.com/NLnetLabs/unbound/pull/1397
https://github.com/NLnetLabs/unbound/pull/1399
🧡 Funding for the development of this functionality is organised by @sunet and provided by @geant.
In our journey to #DigitalSovereignty, here's where we are:
- Domain registration: TransIP and Prolocation 🇳🇱
- Email, calendar, collaborative writing, and more: mailbox.org 🇩🇪
- Document store: Tresorit 🇨🇭
- Critical infra hosting: Hetzner 🇩🇪
- Discourse hosting: Communiteq 🇳🇱
- Security: 1Password.eu 🇨🇦/🇪🇺 and Yubico 🇸🇪
Next up: GitHub —> Codeberg 🇩🇪
To-do: Slack —> Zulip, Matrix, Mattermost?
We forgot that our blog is hosted by ghost.org (HQ in 🇸🇬 and servers in 🇳🇱) #DigitalSovereignty #OpenSource #DNS #BGP
In our journey to #DigitalSovereignty, here's where we are:
- Domain registration: TransIP and Prolocation 🇳🇱
- Email, calendar, collaborative writing, and more: mailbox.org 🇩🇪
- Document store: Tresorit 🇨🇭
- Critical infra hosting: Hetzner 🇩🇪
- Discourse hosting: Communiteq 🇳🇱
- Security: 1Password.eu 🇨🇦/🇪🇺 and Yubico 🇸🇪
Next up: GitHub —> Codeberg 🇩🇪
To-do: Slack —> Zulip, Matrix, Mattermost?
NLnet Labs
boosted
🙏 Colocation recommendation request! (AMS region)
A few weeks ago we asked our dear community if they had any servers they were willing to donate to our foundation for stress testing our BGP engine Rotonda. Since then we had some amazing offers beyond our wildest dreams.
We are now in the luxury position where we have five servers! This opens up more possibilities, such as having a CI/CD server, allowing us to migrate away from GitHub to Codeberg. However, the servers are now heating up our lunch room in a test setup.
Who has colocation recommendations? Preferred region is Amsterdam; Science Park would be perfect. Note that we’re not looking for a favor, but a contractual agreement we can depend on.
🙏 Colocation recommendation request! (AMS region)
A few weeks ago we asked our dear community if they had any servers they were willing to donate to our foundation for stress testing our BGP engine Rotonda. Since then we had some amazing offers beyond our wildest dreams.
We are now in the luxury position where we have five servers! This opens up more possibilities, such as having a CI/CD server, allowing us to migrate away from GitHub to Codeberg. However, the servers are now heating up our lunch room in a test setup.
Who has colocation recommendations? Preferred region is Amsterdam; Science Park would be perfect. Note that we’re not looking for a favor, but a contractual agreement we can depend on.
Stellt euch vor, eine private Organisation aus milliardenschweren Konzernen entscheidet, welche #Webseiten ihr nicht besuchen dürft - ohne #Richter, ohne öffentliche Kontrolle oder #Transparenz.
Genau das macht die CUII in #Deutschland seit Jahren.
In Deutschland entscheidet eine private Organisation aus #Internetanbietern und großen #Unterhaltungskonzernen, welche #Webseiten für den Großteil der #Bevölkerung nicht mehr erreichbar sind.
Die selbsternannte "Clearingstelle #Urheberrecht im #Internet" sperrt ohne richterliche Beschlüsse den Zugriff auf Hunderte von #Domains.
Wir haben daraufhin *cuiiliste.de* ins Leben gerufen, um die geheim gehaltene Liste von Domains zu veröffentlichen und so mehr Transparenz in die heimliche #Zensur der #Konzerne zu bringen.
Fast ein Drittel der gesperrten Domains erfüllte – teils seit Jahren – nicht mehr die Kriterien für eine Sperre.
( Privaten DNS verwenden )
https://media.ccc.de/v/39c3-cuii-wie-konzerne-heimlich-webseiten-in-deutschland-sperren
Are you doing something interesting with #DNS #security, #DNSSEC, routing security, or other forms of #Internet security that you would like to share with the wider (DNS-related) technical community?
If so, consider submitting a proposal for the "DNSSEC and Security Workshop" that will be held at ICANN 85 in Mumbai in March 2026.
Deadline is January 30. Note that you do NOT have to be in Mumbai (I will not be) - you can present remotely.
