The Architect Of The Internet On The Future Of Trust
Security Boulevard, December 11,2025
In this episode of The Defenders Log, Paul Mockapetris, the architect of DNS, discusses the evolving role of the Domain Name System from a simple directory to a sophisticated security tool.
He posits that modern networking requires 'making sure DNS doesn't work when you don't want it to,' comparing DNS filtering to essential services like spam filters and firewalls.
Key Security Concepts
Mockapetris highlights how companies like ThreatSTOP use DNS intelligence to 'craft' a network. By utilizing threat feeds, organizations can block traffic based on:
- Geography: Restricting connections to specific regions (e.g., avoiding conflict zones).
- Domain Age: Blocking domains less than seven days old to avoid fraudulent sites often registered with stolen credit cards.
- Rational Filtering: He argues that choosing who to communicate with is a business necessity, not censorship.
The conversation shifts to the impact of AI, with Mockapetris warning that trillions of automated agents will soon accelerate the scale of spam and network 'jabber.'