Kal Feher
@kalfeher.bsky.social
Unresearched opinions on DNS, Internet and Security.
I worked for a cloud company and now work for a cloud company.
https://kalfeher.com
I worked for a cloud company and now work for a cloud company.
https://kalfeher.com
I've heard from a lot of my ex-colleagues at #AWS in the last few days. Seems like the layoffs were brutal in #australia
Some who were not laid off are also leaving. The stress of waiting for the next round, which will come just after performance review time, is too much.
Some who were not laid off are also leaving. The stress of waiting for the next round, which will come just after performance review time, is too much.
October 30, 2025 at 9:15 AM
I've heard from a lot of my ex-colleagues at #AWS in the last few days. Seems like the layoffs were brutal in #australia
Some who were not laid off are also leaving. The stress of waiting for the next round, which will come just after performance review time, is too much.
Some who were not laid off are also leaving. The stress of waiting for the next round, which will come just after performance review time, is too much.
Reposted by Kal Feher
Reposted by Kal Feher
Reposted by Kal Feher
We are thrilled to announce that our NEW Large Language Model will be released on 11.18.25.
October 1, 2025 at 2:38 PM
We are thrilled to announce that our NEW Large Language Model will be released on 11.18.25.
Reposted by Kal Feher
Could we survive eating only humans?
Watch the latest What If? video collaboration with @minuteearth.bsky.social!
youtu.be/PUtI3xoaHx0
Watch the latest What If? video collaboration with @minuteearth.bsky.social!
youtu.be/PUtI3xoaHx0
Could we survive eating only humans?
YouTube video by xkcd's What If?
youtu.be
September 30, 2025 at 10:51 PM
Could we survive eating only humans?
Watch the latest What If? video collaboration with @minuteearth.bsky.social!
youtu.be/PUtI3xoaHx0
Watch the latest What If? video collaboration with @minuteearth.bsky.social!
youtu.be/PUtI3xoaHx0
This isn’t as surprising as it might seem. Many marsupials have the instinct to climb on something fluffy and they can do it fast. Even when very young.
Luckily I only need to worry about ring tails and brushies climbing onto my dog
#dogs #dogsky #australia #aus
www.abc.net.au/news/2025-09...
Luckily I only need to worry about ring tails and brushies climbing onto my dog
#dogs #dogsky #australia #aus
www.abc.net.au/news/2025-09...
Golden retriever takes baby koala for a joy ride
When Steve Lamplough heard a commotion outside his south-west Victorian home, the last thing he expected to see was a joey koala riding his dog like a racehorse.
www.abc.net.au
September 27, 2025 at 3:03 AM
This isn’t as surprising as it might seem. Many marsupials have the instinct to climb on something fluffy and they can do it fast. Even when very young.
Luckily I only need to worry about ring tails and brushies climbing onto my dog
#dogs #dogsky #australia #aus
www.abc.net.au/news/2025-09...
Luckily I only need to worry about ring tails and brushies climbing onto my dog
#dogs #dogsky #australia #aus
www.abc.net.au/news/2025-09...
If you're associated with .SE or .NU, is there an explanation why mismatch rates for CDS records suddenly jumped in those zones?
could be just a timing thing with a large operator rolling keys at the same time. I'm curious.
kalfeher.com/analysis/cds...
#dns #dnssec #domains
could be just a timing thing with a large operator rolling keys at the same time. I'm curious.
kalfeher.com/analysis/cds...
#dns #dnssec #domains
Daily CDS Usage Charts
Charts showing CDS usage on the Internet. Updated daily.
kalfeher.com
September 6, 2025 at 2:29 AM
If you're associated with .SE or .NU, is there an explanation why mismatch rates for CDS records suddenly jumped in those zones?
could be just a timing thing with a large operator rolling keys at the same time. I'm curious.
kalfeher.com/analysis/cds...
#dns #dnssec #domains
could be just a timing thing with a large operator rolling keys at the same time. I'm curious.
kalfeher.com/analysis/cds...
#dns #dnssec #domains
I've updated CDS tracking charts to show 360 days of aggregated trends. TBH the trend is pretty clear. CDS usage overall is going down and TLD zones are less correct over time. possibly related
#dns #dnssec
kalfeher.com/analysis/cds...
#dns #dnssec
kalfeher.com/analysis/cds...
Daily CDS Usage Charts
Charts showing CDS usage on the Internet. Updated daily.
kalfeher.com
August 29, 2025 at 9:20 AM
I've updated CDS tracking charts to show 360 days of aggregated trends. TBH the trend is pretty clear. CDS usage overall is going down and TLD zones are less correct over time. possibly related
#dns #dnssec
kalfeher.com/analysis/cds...
#dns #dnssec
kalfeher.com/analysis/cds...
Reposted by Kal Feher
ah, well, we get the mint ones
August 26, 2025 at 2:51 AM
ah, well, we get the mint ones
It would be nice if some of the funds auDA receives was directed at modernising DNS for .au. It’s kinda their job but appears to never quite be important enough to do.
So .au still on algo 8 because apathy.
mastodns.net/@diffroot/11...
#dns #dnssec #dnssecurity
So .au still on algo 8 because apathy.
mastodns.net/@diffroot/11...
#dns #dnssec #dnssecurity
Tootzonechanges (@diffroot@mastodns.net)
🇦🇺 au. : Key Rollover - Changed DS
- 51895 8 2
1775 8 2
+ 32902 8 2
mastodns.net
August 8, 2025 at 12:32 AM
It would be nice if some of the funds auDA receives was directed at modernising DNS for .au. It’s kinda their job but appears to never quite be important enough to do.
So .au still on algo 8 because apathy.
mastodns.net/@diffroot/11...
#dns #dnssec #dnssecurity
So .au still on algo 8 because apathy.
mastodns.net/@diffroot/11...
#dns #dnssec #dnssecurity
in the past I've provided expert advice for inclusion in guidelines for domain owners. Often that advice is mangled once published. So I wrote my own guidelines a few yrs ago.
#dns #domains #domainnames
kalfeher.com/secure-pract...
#dns #domains #domainnames
kalfeher.com/secure-pract...
Secure Practices for Domain Owners
The recommendations contained within this document attempt to provide easy to audit points that any domain owner, regardless of technical capability, can …
kalfeher.com
July 5, 2025 at 2:19 AM
in the past I've provided expert advice for inclusion in guidelines for domain owners. Often that advice is mangled once published. So I wrote my own guidelines a few yrs ago.
#dns #domains #domainnames
kalfeher.com/secure-pract...
#dns #domains #domainnames
kalfeher.com/secure-pract...
Reposted by Kal Feher
Huge news for my friends at date-a-dog!
July 3, 2025 at 2:00 AM
Huge news for my friends at date-a-dog!
My local, saazaa, made it into the top 15
www.theage.com.au/goodfood/mel...
it's melbourne. ranking cafes by coffee quality is important
#melbourne #coffee #cafe #australia
www.theage.com.au/goodfood/mel...
it's melbourne. ranking cafes by coffee quality is important
#melbourne #coffee #cafe #australia
These 15 top Melbourne coffee shops and roasters are the crema of the crop
Find a den of dark wood serving long blacks, coffee ceremonies at an Ethiopian cafe and more.
www.theage.com.au
June 27, 2025 at 1:39 AM
My local, saazaa, made it into the top 15
www.theage.com.au/goodfood/mel...
it's melbourne. ranking cafes by coffee quality is important
#melbourne #coffee #cafe #australia
www.theage.com.au/goodfood/mel...
it's melbourne. ranking cafes by coffee quality is important
#melbourne #coffee #cafe #australia
It’s raining and cold today. Also a breakdown in secret management caused an internal outage. Stressful and miserable day. My colleague has handled it surprisingly well.
#dogs #dogsky #dogsofbluesky
June 25, 2025 at 1:45 AM
It’s raining and cold today. Also a breakdown in secret management caused an internal outage. Stressful and miserable day. My colleague has handled it surprisingly well.
#dogs #dogsky #dogsofbluesky
New zone signing key added to root. Verisign's DNZviz had trouble getting TCP responses at this time.
dnsviz.net/d/root/aFUQr...
Everything ok now.
dnsviz.net/d/root/aFXu9...
#dns #dnssec
dnsviz.net/d/root/aFUQr...
Everything ok now.
dnsviz.net/d/root/aFXu9...
#dns #dnssec
. | DNSViz
dnsviz.net
June 20, 2025 at 11:39 PM
New zone signing key added to root. Verisign's DNZviz had trouble getting TCP responses at this time.
dnsviz.net/d/root/aFUQr...
Everything ok now.
dnsviz.net/d/root/aFXu9...
#dns #dnssec
dnsviz.net/d/root/aFUQr...
Everything ok now.
dnsviz.net/d/root/aFXu9...
#dns #dnssec
There’s always been politics in RIRs, but monetising IPv4 has introduced some colourful participants.
Good reason to speed up #ipv6 adoption 😆
Good reason to speed up #ipv6 adoption 😆
AFRINIC election proceeds after ICANN’s attempt to replace officials fails
AFRINIC election proceeds after ICANN’s attempt to replace officials fails
Regulator remains concerned about election integrity
Elections at troubled regional internet registry the African Network Information Centre (AFRINIC) will continue, after the Internet Corporation for Assigned Names and Numbers’ (ICANN’s) attempt to appoint new officials to oversee the poll failed.…
dlvr.it
June 20, 2025 at 4:57 AM
There’s always been politics in RIRs, but monetising IPv4 has introduced some colourful participants.
Good reason to speed up #ipv6 adoption 😆
Good reason to speed up #ipv6 adoption 😆
Reposted by Kal Feher
June 19, 2025 at 8:01 AM
noticed that recently .LI TLD is over 10% errs when querying signed domains. ~ 10.2% is much higher than other TLDs
not in top 10 list so I don't publish the results. I have the data tho.
If you're associated with it, do you have any thoughts on why?
kalfeher.com/analysis/cds...
#dns #dnssec
not in top 10 list so I don't publish the results. I have the data tho.
If you're associated with it, do you have any thoughts on why?
kalfeher.com/analysis/cds...
#dns #dnssec
Daily CDS Usage Charts
Charts showing CDS usage on the Internet. Updated daily.
kalfeher.com
June 13, 2025 at 10:12 AM
noticed that recently .LI TLD is over 10% errs when querying signed domains. ~ 10.2% is much higher than other TLDs
not in top 10 list so I don't publish the results. I have the data tho.
If you're associated with it, do you have any thoughts on why?
kalfeher.com/analysis/cds...
#dns #dnssec
not in top 10 list so I don't publish the results. I have the data tho.
If you're associated with it, do you have any thoughts on why?
kalfeher.com/analysis/cds...
#dns #dnssec
there were zero changes to the root zone
mastodns.net/@diffroot/11...
looks like afilias/donuts/ident-dig taking on a portfolio from ultra/neustar/vercara/digicert
#dns #dnssec
mastodns.net/@diffroot/11...
looks like afilias/donuts/ident-dig taking on a portfolio from ultra/neustar/vercara/digicert
#dns #dnssec
Tootzonechanges (@diffroot@mastodns.net)
zero. : Changed NS
- c.nic.zero.
- ns1.dns.nic.zero.
- ns2.dns.nic.zero.
a.nic.zero.
b.nic.zero.
ns3.dns.nic.zero.
+ v0n0.nic.zero.
+ v0n1.nic.zero.
+ v0n2.nic.zero.
mastodns.net
June 7, 2025 at 1:37 AM
there were zero changes to the root zone
mastodns.net/@diffroot/11...
looks like afilias/donuts/ident-dig taking on a portfolio from ultra/neustar/vercara/digicert
#dns #dnssec
mastodns.net/@diffroot/11...
looks like afilias/donuts/ident-dig taking on a portfolio from ultra/neustar/vercara/digicert
#dns #dnssec
May 30, 2025 at 12:02 AM
Sri Lanka IDN ditches PCH. I wonder if it’s the weird inline signing that PCH configs always seem to have.
mastodns.net/@diffroot/11...
#dns #dnssec
mastodns.net/@diffroot/11...
#dns #dnssec
Tootzonechanges (@diffroot@mastodns.net)
🇱🇰 இலங்கை. ( xn--xkc2al3hye2a. ) : Changed NS
- lk.communitydns.net.
- nic.lk-anycast.pch.net.
- ns-c.nic.lk.
- ns-d.nic.lk.
- ns-l.nic.lk.
- ns-t.nic.lk.
- ns3.ac.lk.
ns1.ac.lk.
+ h.nic.lk.
+ m.nic...
mastodns.net
May 29, 2025 at 11:20 PM
Sri Lanka IDN ditches PCH. I wonder if it’s the weird inline signing that PCH configs always seem to have.
mastodns.net/@diffroot/11...
#dns #dnssec
mastodns.net/@diffroot/11...
#dns #dnssec
Reposted by Kal Feher
The existence of Norway implies the existence of Nandway.
May 24, 2025 at 6:18 PM
The existence of Norway implies the existence of Nandway.
I once had to do an algo downgrade when re-delegating to Afilias/Donuts/Identity-dig. made things very complicated
Luckily IN already using older algo.
infosec.exchange/@diffroot@ma...
#dns #dnssec
Luckily IN already using older algo.
infosec.exchange/@diffroot@ma...
#dns #dnssec
Infosec Exchange
infosec.exchange
May 23, 2025 at 11:49 PM
I once had to do an algo downgrade when re-delegating to Afilias/Donuts/Identity-dig. made things very complicated
Luckily IN already using older algo.
infosec.exchange/@diffroot@ma...
#dns #dnssec
Luckily IN already using older algo.
infosec.exchange/@diffroot@ma...
#dns #dnssec