@shuque

Software Engineering Architect @salesforce. Ex @VERISIGN Principal Scientist. Ex @Penn engineer. @Penn CS Alum. Opinions here are my own.

 Washington, DC
huque.com/
Joined November 2008
  • Tweets1.9K
  • Following700
  • Followers578
218Media
RFC 9102: "TLS DNSSEC Chain Extension", finally published as "experimental" -- a few years after a long, acrimonious battle in the IETF TLS WG to get it published as "standards track" failed: rfc-editor.org/rfc/rfc9102.h…
1
2
13
Shumon Huque retweeted
DNS-OARC@dnsoarc6 Sep 2023
Shumon Huque covers much ground in his presentation, including a call for an ICANN role for DNS providers, and handling parental detection of CDS/CDNSKEY records - on which there were new ideas proposed by Johan Stenstam during IDS yesterday. #OARC41 #LoveDNS ^CA
5
5
507
Shumon Huque retweeted
DNS-OARC@dnsoarc6 Sep 2023
Shumon Huque from Salesforce presenting "Automation of DNSSEC provisioning and maintenance" asserts that robust automation in these areas should make it easier to deploy DNSSEC indico.dns-oarc.net/event/47… #OARC41 #LoveDNS ^CA
3
4
272
#IETF114 Meeting Tshirt. Does it look familiar?
1
14
Shumon Huque retweeted
APNIC@apnic25 Aug 2021
On the blog today, @shuque breaks down alternative models to zone transfer that can support #DNSSEC's non-standardized features: blog.apnic.net/2021/08/25/mu… #DNS #MultiSigner #security
4
5
#IETF111 dnsop yesterday "Black Lies Empty Non-Terminal Sentinel" Slides: datatracker.ietf.org/meeting… draft: datatracker.ietf.org/doc/htm…
1
1
And 1 more #IETF111 DNSSEC Automation ietf.org/archive/id/draft-wi…; Slides datatracker.ietf.org/meeting…, with @wisser
2
1
Also #IETF11 Domain Verification Techniques: ietf.org/archive/id/draft-sa…; Slides datatracker.ietf.org/meeting… with @shivan_kaul
3
4
Presented at #IETF111 today: (DNS) Glue is not Optional draft ietf.org/archive/id/draft-ie…; Slides: datatracker.ietf.org/meeting… with m. andrews, @letoams & @PacketPusher
5
1
Quick test of Route53 DNSSEC, zone is "r53.huque.com": dnsviz.net/d/r53.huque.com/d…
3
Amazon announces DNSSEC support in Route53 aws.amazon.com/about-aws/wha…
9
2
17
Neustar acquires Verisign's public DNS service: home.neustar/about-us/news-r…

Trusted Connections at the Moments that Matter the Most | Neustar

Neustar Enables Trusted Connections Between Companies and People at the Moments That Matter the Most.

home.neustar
1
2
#DNSSEC My quick explainer of NSEC3 non-existence proofs on the IETF dnsop list: mailarchive.ietf.org/arch/ms…
1
9
RFC 8901: "Multi-Signer DNSSEC Models" has been published: rfc-editor.org/rfc/rfc8901.h…
1
6
12
Looking at the IETF datatracker, the 1st draft was in March 2018, so 2.5 years from start to finish: datatracker.ietf.org/doc/rfc…

RFC 8901: Multi-Signer DNSSEC Models

Many enterprises today employ the service of multiple DNS providers to distribute their authoritative DNS service. Deploying DNSSEC in such an environment may present some challenges, depending on...

datatracker.ietf.org
1
1
"“.. clash of E.U. privacy law and U.S. surveillance law. As the E.U. will not change its fundamental rights to please the NSA, the only way to overcome this clash is for the U.S. to introduce solid privacy rights for all people — including foreigners" washingtonpost.com/world/eur…

Top E.U. court ruling throws transatlantic digital commerce into disarray over privacy concerns

The court said E.U. citizens are insufficiently protected from U.S. surveillance when their data is on U.S. soil.

washingtonpost.com
I am informed that this fun infographic of my talk was created by @MindsEyeCCF - thank you! 💕😻
This Post is from an account that no longer exists. Learn more
1
2
8
This is @ns1's fun composite graphic of my talk (not my actual diagrams) :)
This Post is from an account that no longer exists. Learn more
6
I'm speaking at @NS1's INS1GHTS2020 conference today, at 2:40PM UTC on DNSSEC with Multiple Providers: ins1ghts.ns1.com/ . You might win an Oculus Quest if you attend ..
3
Photos: #ICANN68 DNSSEC and Security virtual workshop. Sunday ~midnight my time.
2
Load more