Oct 2026· Proceedings of the 2026 ACM Internet Measurement Conference· pp. 1219-1220· 0 citations· 6 references
TL;DR
The first systematic measurement of the IANA-delegated ip6.arpa hierarchy is presented, verifying 21,999 /32 zones, approximately 11.37 million /48 zone cuts, and 5.68 million /56 zone cuts separated from 35.25 million wildcard-synthesized responses.
Abstract
The ip6.arpa namespace is the authoritative reverse DNS tree for IPv6. Although primarily intended for reverse lookup, it also permits other uses. The extent and distribution of non-PTR content in this namespace remain poorly understood. We present the first systematic measurement of the IANA-delegated ip6.arpa hierarchy. We verify 21,999 /32 zones, approximately 11.37 million /48 zone cuts, and 5.68 million /56 zone cuts separated from 35.25 million wildcard-synthesized responses. Among the /48 zones, 5.48 million return at least one apex record. Among 26,251 IP addresses observed in A and AAAA records, 125 are flagged by VirusTotal as malicious or suspicious. Flagged IP addresses serve as apex A targets for 149,372 of 1.13 million /48 zones.
DNS resolvers increasingly support various encryption protocols, ensuring their communication with end clients remains confidential. The recursive-to-authoritative link has long been overlooked though, despite multiple reports on traffic analysis and response injection by state censors. The experimental RFC 9539 addres...
Yevheniya Nosyk, Simon Fernandez, Andrzej Duda et al.· Proceedings of the 2026 ACM...· 1 citation
DNSSEC authenticates RRsets, but does not provide endpoint authentication or channel security. DNS-over-TLS (DoT) and DNS-over-QUIC (DoQ) can facilitate such needs, but were designed for the stub-to-resolver hop, where stable long-lived connections amortize the expensive initial setup. The recursive-to-authoritative pa...
It is argued that IPv6 is not merely a remedy for address exhaustion but an enabling foundation for future innovation, offering scalability, improved security, and simpler network management.
Ajay Kumar· Proceedings of International...· 0 citations
RFC 9539 defines a unilateral opportunistic mechanism for deploying encrypted DNS on the recursive-to-authoritative link, yet its real-world deployment and operational behavior remain incompletely characterized. Mapping this ecosystem requires complementary observations of both resolver behavior and authoritative capab...
Yu-Jia Zhu, Lin-Kang Zhang, Bai-Yang Li et al.· Proceedings of the 2026 ACM...· 0 citations
Identifying deployed DNS resolver software supports Internet measurement, vulnerability assessment, and upgrade planning, but explicit probes such as "version.bind" are often disabled or falsified. We investigate whether ordinary DNS responses provide behavioral fingerprints for resolver identification. In a controlled...
Yu-Xin Hu, Xiang Li· Proceedings of the 2026 ACM...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
