In this episode, Matt and Cricket are joined by Ulrich Wisser, a colleague of Matt’s at ICANN. Ulrich explains the latest efforts in the area of DNSSEC automation, including CDS, CDNSKEY and now even CSYNC records and how they’re used. Ulrich mentions a Github repo that includes a list of registries, registrars, DNS providers and software that support DNSSEC automation; and an SSAC report on DS record automation.



This very informative section gradually devolves into amusing (for us, anyway) recollections of attempts to “tamper” various hardware security modules.



Toward the end, as is their wont (and when do you ever hear the word “wont” except in that context?), Matt and Cricket profess their childlike excitement over the upcoming “Murderbot” series, and Matt admits (much to Cricket’s astonishment) that he has never read “Dune.”