NEWS

Many bugfixes thanks to code reviews, A big pyldns update and DANE support (RFC 6698), including a new example tool: ldns-dane for verifying and creating TLSA records.

Bugfix release. For downloads and more information about future releaseplans, visit the OpenDNSSEC website.

NLnet Labs now maintains a blog. We use it to publish (technical) background informagion about design and the use of our software and other material relevant to the community.

This thesis analyses error situations in securing DNS zones with OpenDNSSEC. Recommendations are presented to increase the resilience level that OpenDNSSEC can offer against such situations.

bugfixes: assertion failures, validator failure

Emergency release fixing another denial of service vulnerability [ VU#517036 CVE-2012-2979 ], a bugfix and a typo.

Measurement and analysis of Path MTU black holes due to ICMP and packet fragment filtering on the Internet.

Emergency release fixing a denial of service vulnerability from non-standard DNS packet from any host on the internet. [ VU#624931 CVE-2012-2978 ]

TLSA/DANE support, ECDSA, per zone statistics and a couple of bugfixes.