Unsorted Bookmarks

This document describes often used patterns for establishing technical trust for public key-based security architectures other than traditional PKIX-based public key infrastructure. The intent is that this document be useful as a reference for protocol specification authors who use technology like PKIX, PGP or S/MIME as part of their protocols.

A major problem facing PKIX deployment and implementation is the problem of constructing certificate paths for input to the path validation algorithm. This draft describes the use of the DNS as a certificate store and it's implication for path validation in PKIX.

Explains how to avoid creating the /etc/resolv.conf file each time by creating hook called make_resolv_conf.

This article presents a comparison of the features, platform support, and packaging of many independent implementations of Domain Name System (DNS) name server software.

In telecommunications, an IP Detail Record (IPDR) provides information about Internet Protocol (IP)-based service usage and other activities that can be used by operations support systems (OSSes) and business support systems (BSSes). The content of the IPDR is determined by the service provider, network/service element vendor, or any other community of users with authority for specifying the particulars of IP-based services in a given context. The IPDR specifications were originally produced by the Internet Protocol Detail Record Organization, Inc. (aka IPDR.org). In 2007, the IPDR.org organization was acquired by the TM Forum, an industry association of more than 900 global members in over 160 countries from across the converging industries of telecom, cable, media and the Internet. The IPDR specifications include requirements for IPDR collection, encoding and transport protocols to exchange IPDR records, the IPDR service specification design guidance, and several sample IPDR Service Definition documents. The IPDR specs are maintained and continue to evolve at the TM Forum Interface Program. The President/COO of IPDR was Kelly Anderson and the technical team lead of IPDR from 2004 until it was folded into the TM Forum was Amit Kleinmann of Amdocs.

We have a SRX 5800 (HA cluster) running and doing private-to-public NAT for our students, and most staff/faculty.  The issue is on the Cisco's we had we could tweak the logging settings to log just the NAT create and the NAT release.  However, in th

The ip nat log translations syslog command starts NAT logging: every NAT translation created on the router is logged in syslog (which can be sent to console, syslog host or internal buffer). You could use this command as a poor man’s reporting tool if you have to monitor the address translations on your edge routers (for example, due to security policy or auditing requirements). Obviously you should configure the no logging console first in a production environment; otherwise your router will hang a few moments after you’ve enabled NAT logging.

This post, along with seventy-eight others, is collected in the book Utopia Is Creepy. “If you could choose only one of the following two inventions, indoor plumbing or the Internet, which wo…

The guys who brought you the iPhone and Gmail now want to connect your washing machine, light switch, and just about any other electric device you can think of to the Internet. Get ready to be amazed.

Without further comment, except to note that this is really all there is to this. Signatures will autorotate, 'pdnssec' allows for complete ...

Fast, searchable Ruby documentation for core and standard libraries. Plus, links to tutorials, guides, books, and related sites.

When people expect to be able to access information in the future, they tend to have reduced memory for the actual information, but enhanced memory for where to find the information.

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. Late 2019, Unbound has been rigorously audited, which means that the code base is more resilient than ever. To help increase online privacy, Unbound supports DNS-over-TLS …

At a first glance, IPTables rules might look cryptic. In this article, I’ve given 25 practical IPTables rules that you can copy/paste and use it for your needs. These examples will act as a basic templates for you to tweak these rules to suite your specific requirement. For easy reference, all these 25 iptables rules

Ubuntu est un système d’exploitation Linux/GNU, fonctionnant sur la distribution Linux Debian. La société Canonical est en charge de son développement, de sa commercialisation et de son maintien pour les ordinateurs individuels. Un acteur essentiel de l’emploi dans les projets open-source. Plus globalement, il se considère comme un système utilisé Continue Reading

The web’s most popular front-end template which helps you build fast, robust, and adaptable web apps or sites.