DNS Security

DNSSEC in Ghana: 99% Can Validate, But .gh Remains Unsigned

Ghana reports approximately 99% DNSSEC validation capability among measured users, yet its .gh domain remains unsigned, exposing a gap between resolver readiness and domain security that calls for coordinated deployment and operational planning.

Quad9’s Planned Departure From France Shows Why Internet Infrastructure Policy Needs a Wider Lens

Quad9's planned withdrawal from France over DNS blocking orders highlights the tension between copyright enforcement and Internet security, raising questions about whether infrastructure-level restrictions impose consequences beyond their intended targets.

The Phishing Domain You Missed Shares a Nameserver With the One You Caught

Nameserver-based searches can uncover related domains that conventional phishing monitoring misses. An investigation of shared DNS infrastructure reveals how registration patterns, nameserver pairs and timely zone data can help identify suspicious domain clusters.

The Domain Trust Badge: Making Anti-Abuse Work Visible

The Domain Trust Badge pilot introduces a voluntary framework for registries and registrars to demonstrate effective anti-abuse practices through 17 requirements, evidence-based validation and a new metric measuring abuse mitigation performance.

Pakistan’s .PK Is Now DNSSEC-Signed, but Only One Domain Validates

Pakistan's .pk domain has gained DNSSEC protection, but an October 11 scan found just one fully validating domain among 158,561 examined. Another 1,230 signed domains lack the parent-zone records needed to establish trust.

Abolish The Public Suffix List

The Public Suffix List has become a critical dependency for web security despite inconsistent implementation, restrictive admission policies and limited maintenance resources. Its replacement would require coordinated standards development and greater domain operator control.

Common Beliefs About DNSSEC Put to the Test: An Invitation to Fact-Check Your Assumptions

With its perception still tinged by decade-old notions, DNSSEC in 2026 bears little resemblance to its troubled early years. Here's what the evidence says about its benefits, cost, and availability today.

The Case for Longitudinal DNSSEC Data

Repeated DNSSEC failures show the limits of snapshot diagnostics. A longitudinal record of signed delegations could reveal persistent misconfigurations, rollover problems and correlated failures, helping operators identify recurring patterns and their likely sources.

How CZDS Zone Data Helps Detect Domain Abuse

Daily CZDS zone data can help brand owners and investigators detect suspicious domain registrations earlier, trace related infrastructure, monitor expired names, and shift enforcement from reactive disputes toward faster, evidence-based intervention.

The Reporting Gap: What Happens Between a DNS Abuse Complaint and a Takedown

DNS abuse enforcement can stop abusive domains and drive systemic registrar reforms, but reporting barriers, inconsistent response times, and poorly documented complaints leave many phishing sites active before actionable cases ever reach enforcement.