Tipping our Hats [cert.at]

It’s not an everyday occurrence that an Austrian Company finds an important security issue. If they then follow responsible disclosure towards the vendor and also inform the local CERT, that’s something that should be openly acknowledged. Thus: A round of applause from CERT.at goes to Johannes Greil of SEC Consult Unternehmensberatung GmbH for finding a … Read more

Enabling DNSSEC Validation [cert.at]

This week, Comcast announced that they will enable DNSSEC validation on their production resolvers. One thing one might want to keep in mind if you do that: People make mistakes. Some domain owners will break their DNSSEC signatures. We’ve seen a good number of these in 1010, including TLDs like .arpa, .be, and .uk. I … Read more