Stateless DNS
Technical report KN-2014-DISY-004, University of Konstanz, 2014-12-31:
Several network applications, like service discovery, file discovery in P2P networks, distributed hash tables, and …
Boost DNS Privacy, Reliability, and Efficiency with opDNS Safe Query Elimination
NetSys 2015, 2015-03-10:
SRV records, DNSSEC, and DANE among others fortify the Domain Name System as the central …
A Multicast-Avoiding Privacy Extension for the Avahi Zeroconf Daemon
NetSys 2015, 2015-03-10:
In today’s local networks, a significant amount of traffic is caused by Multicast packets, such …
JSXC: Adding Encrypted Chat with 3 Lines of Code
NetSys 2015, 2015-03-10:
If it is not in the web, it does not exist. However, most of our …
SIEGE: Service-Independent Enterprise-GradE protection against password scans
article, 2014-11-30:
Security is one of the main challenges today, complicated significantly by the heterogeneous and open …
Adding your FRiTZ!Box as a „secure“ DNS resolver for the fritz.box pseudo-domain
Your FRiTZ!Box maintains a useful list of names of machines in your local network in its pseudo-domain fritz.box, based on DHCP requests and web interface. This information is useful, but ...
DANE: The CA game changer
Securing the Internet is important. However, many design decisions are broken: For example, encrypted web pages are considered less secure than unencrypted pages, even outright dangerous, unless you regularly pay ...
Efficient Privacy Preserving Multicast DNS Service Discovery
Workshop on Privacy-Preserving Cyberspace Safety and Security (CSS), 2014-08-23:
In today’s local networks a significant amount of traffic is caused by Multicast DNS Service …
Adding Privacy to Multicast DNS Service Discovery
Proceedings of IEEE TrustCom 2014 (IEEE EFINS 2014 workshop), 2014-09-24:
Multicast DNS Service Discovery (mDNS-SD), made fashionable through Apple’s Bonjour, is a prevalent technique allowing …
Disable client certificate requests for Cyrus IMAP
Cyrus IMAPd always asks for a client certificate. This can be unnerving for users running Thunderbird as their mail client which have a user certificate installed and are thus always ...