1. Adventures in DANE

    Fri 28 August 2015 By Andrew McConachie

    This post will reflect on the relatively new DNS-based Authentication of Named Entities(DANE) protocol from the Internet Engineering Task Force(IETF). We will first explain how DANE works, talk about what DANE can and cannot do, then briefly discuss the future of Internet encryption standards in general before wrapping …

    read more
  2. Metafarce Update -> systemd, man pages, and TLS

    Tue 04 August 2015 By Andrew McConachie

    I've recently had time to update the guts of metafarce.com. This post is about the updates to those guts, including what I tried that didn't work out so well. The first section is full of personal opinion about the state of free UNIX OS's.1 The second section concerns …

    read more
  3. DANE Related bug in OS X Yosemite

    Tue 28 July 2015 By Andrew McConachie

    This post is meant to document a software bug I believe I've found in Apple's Mac OS X. In short, OS X 10.10.3 fails to flush DNS TLSA records when flushing other DNS records. TLSA records can only time out based on their TTL, they will otherwise never …

    read more

Page 1 / 1