This document explains how to use ASPA, and how to use it in BIRD, without getting too deep into the theory and preciseness which the normative documents need.
0
We are pleased to share the publication of our latest research, which explores how seasonal patterns of human behaviour are reflected in the dynamics of the .CZ domain registry.
0
Starting with version 3.5, Knot DNS allows you to perform an external validation of a new zone version before updating it. This article describes how is this feature used to validate (not only) .CZ zones.
0
Since the beginning of the year 2026, we have been receiving bug reports generated by LLMs. It has never been as bad as with curl last year though. It also started later than curl and with better quality of the reports than what Daniel Stenberg describes. We are not totally overwhelmed by the reports, yet they are still consuming a significant amount of our time every other day.
0
Few weeks ago, one particular large scale cyber-attack hit the mainstream news everywhere. Russian cyber actor APT28 attacked SOHO routers and managed to compromise some credentials through that. The attack itself was carried in multiple phases and was quite interesting. Let’s take a look at those individual steps, what happened, how it worked and what could have been done to prevent this type of attack.
0
0
At the end of September, we welcomed two representatives of the Costa Rican registry. Our colleagues from Costa Rica have been using our registry system FRED for several years to manage their domain space, but most of our communication has taken place in writing. The opportunity for another in-person meeting was therefore exciting for both sides.
0
Over July and August, we received several reports about always the same cryptic bug happening quite sparsely. We were methodically disproving every hypothesis about this bug and slowly accepting our feat of creating a very specific and complex test setup to reproduce andproperly analyze the bug.
0
This article is written in an effort to aid those who are considering Knot DNS as a replacement for OpenDNSSEC.
More specifically, in this article we’ll be showing how to:
If you’ve never interacted with Knot before, please familiarize yourself with the basics. Our documentation provides a great novice-friendly introduction.
2
The CZ.NIC Association released a new version of EPPIC on July 2, 2025. Compared to the previous version, new commands have been added, the behavior of existing commands has been improved (in a backward-compatible way), and errors in texts have been fixed. Since EPPIC has only been briefly mentioned on this blog so far, let’s introduce it in more detail.
0
