Why DNS Uses UDP (and When It Doesn't)
DNS runs the busiest request-response system on the internet on top of a transport that doesn't promise your packet will arrive. That wasn't a shortcut. It was the right call — until the answers got too big.
Blog
Protocols, security incidents, and how the internet actually works. 147 posts.
DNS-over-HTTPS Changed Nothing (and Everything)
DoH wraps DNS queries in HTTPS. Same questions, same answers, different transport. The technical change is simple. The political implications are enormous.
BGP: The Protocol That Runs on Trust
BGP routes the internet with no built-in authentication. Any autonomous system can announce any prefix. Route hijacking is trivially possible. Here's how it works and what RPKI is trying to fix.
What Happens in the First 50 Milliseconds of a DNS Query
You type a URL and the page loads. In between, your computer may have talked to four servers, walked a hierarchy designed in 1983, and relied on caching so aggressive most queries never leave the first resolver.
How DNSSEC Works (and Why Nobody Uses It)
DNSSEC is elegant cryptography with brutal operational reality. Two decades in, the vast majority of domains are still unsigned. The protocol isn't the problem.