CDN
Turkey blocks BunnyCDN; Ctrl blog and 14 000 websites inaccessible
Ctrl blog was inaccessible in Turkey for five days as the country inadvertently blocked the BunnyCDN content delivery network.
DNS
DNS
How I blocked myself from obtaining a Let’s Encrypt TLS certificates
A misapplied DNS CAA record blocked Certbot from obtaining a Let’s Encrypt certificate for my domain name. Ouch. Have a fallback strategy!
Distributed web
DNSLink and IPNS availability survey
I surveyed millions of websites to discover which domains were set up with an DNSLink address for the IPFS peer-to-peer alternative to the internet.
DNS
Actually secure DNS over TLS in Unbound
Resolve a common DNS over TLS configuration mistake in the Unbound DNS server that makes you vulnerable to attacker-in-the-middle resolver interceptions.
DNS
How to randomize DNS resolver selection in Knot Resolver
Improve your privacy by spreading DNS resolution requests out among many recursive DNS resolvers. No single provider will know all you do online.
DNS
Get faster and more secure DNS resolution with Knot Resolver on Linux
A tutorial for setting up a recursive DNS over TLS resolver server with Knot Resolver on Fedora Linux.
DNS
How to take back control of /etc/resolv.conf on Linux
Take manual control of your Linux system’s DNS resolution and keep programs from interfering with and overwriting your resolv.conf file.
Authentication and Passwords
I regret transferring my domains to Hover
Ads had promised me that Hover.com was a great domain registrar. Trusting them to handle my domains turned out to be a big mistake.
DNS
Don’t register your domains with Automattic
I’d registered my Ctrl.blog domain with Get.blog. That service no longer exists and my domain was transferred to WordPress.com without notice.
DNS
How to prevent Let’s Encrypt from issuing certificates for your domain
Let’s Encrypt has made it really easy to obtain TLS certificates. Here is how to block the service from issuing certificates for your domains.
DNS
Stop CAs from misissuing certificates for your domains with CAA
Add DNS CAA records for your domains to block unauthorized certificate authorities (CAs) from issuing certificates for your domain names.
DNS
Review: Managed GeoDNS on a budget
A comparison review of six GeoDNS service providers. GeoDNS can help reduce latency by directing your website traffic to the nearest datacenter.