DNS

DNSSEC in Ghana: 99% Can Validate, But .gh Remains Unsigned

Ghana reports approximately 99% DNSSEC validation capability among measured users, yet its .gh domain remains unsigned, exposing a gap between resolver readiness and domain security that calls for coordinated deployment and operational planning.

Quad9’s Planned Departure From France Shows Why Internet Infrastructure Policy Needs a Wider Lens

Quad9's planned withdrawal from France over DNS blocking orders highlights the tension between copyright enforcement and Internet security, raising questions about whether infrastructure-level restrictions impose consequences beyond their intended targets.

The Phishing Domain You Missed Shares a Nameserver With the One You Caught

Nameserver-based searches can uncover related domains that conventional phishing monitoring misses. An investigation of shared DNS infrastructure reveals how registration patterns, nameserver pairs and timely zone data can help identify suspicious domain clusters.

Pakistan’s .PK Is Now DNSSEC-Signed, but Only One Domain Validates

Pakistan's .pk domain has gained DNSSEC protection, but an October 11 scan found just one fully validating domain among 158,561 examined. Another 1,230 signed domains lack the parent-zone records needed to establish trust.

Abolish The Public Suffix List

The Public Suffix List has become a critical dependency for web security despite inconsistent implementation, restrictive admission policies and limited maintenance resources. Its replacement would require coordinated standards development and greater domain operator control.

Common Beliefs About DNSSEC Put to the Test: An Invitation to Fact-Check Your Assumptions

With its perception still tinged by decade-old notions, DNSSEC in 2026 bears little resemblance to its troubled early years. Here's what the evidence says about its benefits, cost, and availability today.

Why So Many .do Domains Lack Functioning Websites: Exploring Strategic Uses of the Dominican Republic’s ccTLD

An analysis of 41,140 Dominican Republic .do domains reveals widespread website inactivity and distinctive naming patterns, raising questions about domain speculation, brand protection and the international appeal of the country's Internet namespace.

The Case for Longitudinal DNSSEC Data

Repeated DNSSEC failures show the limits of snapshot diagnostics. A longitudinal record of signed delegations could reveal persistent misconfigurations, rollover problems and correlated failures, helping operators identify recurring patterns and their likely sources.

A Domain Is Registered. But Is It Really Unavailable?

RFC 10023 standardizes a DNS TXT record that lets domain holders signal a registered name is for sale, giving registrars, marketplaces, brokers and search tools a machine-readable way to distinguish registration from purchase availability.

How CZDS Zone Data Helps Detect Domain Abuse

Daily CZDS zone data can help brand owners and investigators detect suspicious domain registrations earlier, trace related infrastructure, monitor expired names, and shift enforcement from reactive disputes toward faster, evidence-based intervention.