Benno Overeinder is managing director at NLnet Labs. NLnet Labs is a non-profit research lab whose mission is to build a bridge between academic results and practical deployment of new technology in our networks. As a research engineer, Benno is particularly interested how results from research have practical and operational implications on how we run our networks.
Topics of interest are DNS and DNSSEC (implementation, operation and policy), DANE, inter-domain routing (BGP dynamics, stability, and scalability — measurement and analysis), routing control plane configuration and management, inter-domain routing security, IPv6 deployment, and Internet measurements at large. He is also an active member in the RIPE and IETF community.
The DNS is at the core of most interactions on the Internet. Therefore it is essential to ensure proper authentication and encryption of DNS data. There are number of initiatives that can help users in this context.
After the publication of the Critical Infrastructure Protection report more than ten years ago, we asked ourselves how critical infrastructure companies are interconnected, how resilient these connections are, and to which extent they are dependent on foreign entities.
Last week we released a new version of Unbound with a fix for CVE-2017–15105. Unbound, Google public DNS, PowerDNS and Dnsmasq contained a flaw that made it possible to downgrade secure connections.
This artlce looks at the results of a recent survey that was conducted to find out which network security methods are currently in place and how operators are preparing for the introduction of Resource Public Key Infrastructure (RPKI). As part of the study, we also conducted interviews with a numbe…