Communicator at deSEC's ICANN-supported project “Closing the DNSSEC Maturity Gap through Automation”
Joined May 2025
- Tweets43
- Following33
- Followers4
- Likes3
Pinned Tweet
As it happens, DNSSEC needs a little help to finally get the deployment it deserves. And that’s exactly what our project means to do: both on the technical side (through automation) and on the communication side (through community outreach). So off we go! #DNSSEC
Common beliefs on DNSSEC are rooted in its turbulent past, and have persisted for over a decade.
But how well do they reflect DNSSEC’s reality today?
Fact-checking time!
> This is the second article in our series on DNSSEC.
Enjoy - and keep tuned for article #3 and #4! <
COMMON BELIEFS ABOUT DNSSEC PUT TO THE TEST: AN INVITATION TO FACT-CHECK YOUR ASSUMPTIONS
—
More trouble than it’s worth? Fact is: DNSSEC in 2026 bears little resemblance to its turbulent early years.
by Barbara Jantzen
circleid.com/posts/common-be…
DNSSEC has been around for 20+ years — so why isn’t it everywhere yet?
Our new piece at APNIC highlights the real blocker: complex, manual processes that make deployment harder than it should be.
Standards like CDS/CDNSKEY already exist. Some ccTLDs have proven automated models work. What’s missing is broad, coordinated implementation — with support from bodies like ICANN.
If we want a more secure Internet by default, DNSSEC needs automation at scale.
Get a grasp of best current practice: blog.apnic.net/2026/02/25/to…
Deployment of technical standards is surprisingly emotional and narrative-driven. Can’t believe it? Here you go!
#DNS #DNSSEC #CircleID
THE EXCRUCIATING SLOW RISE OF DNSSEC: A DIALOGUE WITH ROY ARENDS ABOUT MYTHS, REALITIES AND HARD LESSONS
—
DNSSEC was meant to fix DNS, but hype, outages, and online narratives turned it into a punchline. Can fresh perspectives and automation revive trust?
A dialogue between Roy Arends, a long-time DNSSEC advocate and Barbara Jantzen:
circleid.com/posts/the-excru…
Still looking for good and/or silly ideas to nourish my Fakebook project (see below)! So, in case you should get all meditative and inventive under the Christmas tree (or whatever you do at this time of year), send me your thoughts (via comment or PM)!
In the near future, I will create a funny (but factually accurate) Fakebook on DNSSEC history. Think of it as a fictitious Facebook wall, on which any person, institution or entity imaginable (God, the DNS, the Objective Truth) can enter the stage as a contributor or commentator.
In the near future, I will create a funny (but factually accurate) Fakebook on DNSSEC history. Think of it as a fictitious Facebook wall, on which any person, institution or entity imaginable (God, the DNS, the Objective Truth) can enter the stage as a contributor or commentator.
At DNS-#OARC45, my colleague Peter Thomassen presented his updated draft on DNSSEC automation guidelines – that will maximize interoperability and minimize surprise. If that doesn’t sound like DNSSEC to your ears, go check it out!
youtube.com/watch?v=zQyrcVOf…
#DNS #DNSSEC #automation
And here's the draft in question: datatracker.ietf.org/doc/dra…
After making people laugh about DNSSEC at IETF 123’s pecha kucha night, I was given the opportunity, at DNS-OARC 45, to talk about why it’s not a good idea to neglect the impact of image and emotions, even when dealing with technical DNS matters: youtube.com/watch?v=3HoHF45I…
On day 2, I had the opportunity to talk about how image (and not only facts) can impact the assessment of technical issues, taking DNSSEC as an example.
Fun fact: I started my talk with an impersonation… risky, but worth it ;-)
bit.ly/4qhNdcD
#LoveDNS #OARC45 #DNSSEC
On day 1, my colleague Peter Thomassen presented his (and Steve Shengs) draft on DS automation guidelines, amended by the results of the previous day’s workshop discussion, and aiming at getting further feedback from the DNS community.
bit.ly/4nwdbGV
#OARC45
Starting with a “pre-DNS-OARC 45” workshop (together with my collegue Peter Thomassen), aiming at crafting a consensual take on DS automation guidelines. Thanks to all the participants and to #Internetstiftelsenfor providing a friendly location!
#LoveDNS #OARC45 #ItsAlwaysDNS
