Again I attended Hexacon in Paris this year. Again it was a very cool event. Congratulations to Renaud and team for the great conference — smooth organization and an excellent speaker line-up. Here are some notes on a couple of talks. Xerub: The two-sided mirror, perspective on infosec from both a defensive and an offensive ..read more

Last week I attended TROOPERS23 in Heidelberg. Great event, great community, great talks! In the following I’ll summarize a couple of them which I found particularly interesting. Jiska Classen & Alexander Heinrich: Attacking Ultra-Wideband: Security Analysis of UWB Applications in Smartphones Jiska and Alexander have done quite some significant security research of radio technologies in the past, and ..read more

Earlier this week I went to Atlanta for NANOG87. I hadn’t been at a NANOG meeting for a while – I even missed the legend “World IPv6 Reunion Tour 2022” panel with my friend Jason Fester + some other fine IPv6 folks at NANOG85 in Montréal. Many people mainly join NANOG meetings for the hallway track ..read more

I had initially planned to focus the sequel of the 1st part on discussing more use cases, but I meanwhile think it couldn’t hurt to insert a quick presentation of some certificate best practices, in order to make this little series more practical ? The following little pieces of advice are addressing three main risks ..read more

I’ve written a couple of posts on (X.509v3) certificates in the past, starting with this one in 2001. In the two decades since then a number of developments have taken place (to name a few: OCSP, ACME, Let’s Encrypt certificates and the general role of automation). On the other hand the fundamental mechanisms of certificates ..read more

What a lovely week! An in-person RIPE meeting – Jan Žorž said to me over dinner “it immediately felt like home”, and I totally agree.Following some tradition I will summarize a few interesting, IPv6-related talks & other observations from last week in this post. Constanze Bürger: Challenges and Chances of IPv6 Deployment in Public Authorities ..read more

Last week I attended the IETF 113 meeting in Vienna. I primarily went there to reconnect in person with some old IPv6 fellows, but also to see what’s going on in the IPv6 standardization space which I hadn’t been following closely in recent times. In this post I’ll shortly summarize some contributions presented in the ..read more

Recently RFC 9099 Operational Security Considerations for IPv6 Networks was published. It was authored by Éric Vyncke,  Kiran Kumar ‘KK’ Chittimaneni, Merike Kaeo und myself, and we plan to write a little series on its objectives & main recommendations on the APNIC Blog. To prepare for that let me provide a short overview of it ..read more