Verisign Labs
Talented, Collaborative and Dedicated

The Verisign Labs team brings a tremendous breadth of expertise and talent.


Biography

Duane Wessels, a fellow at Verisign, focuses on data analysis and Domain Name System Security Extension projects. He brings over 15 years of experience working in the data analysis and research fields.

Prior to joining Verisign in 2010, Duane was the director of the Domain Name System Operations Analysis Research Center, where he developed tools and services, organized workshops, and recruited new members.

Duane is an active participant in various Internet Corporation for Assigned Names and Numbers multi-stakeholder community groups, including the Root Server System Advisory Committee, the Root Zone Evolution Review Committee and the Root Server System Governance Working Group. Duane is also an active member of the Internet Engineering Task Force DNS Operations working group, the North American Network Operators’ Group, and DNS-OARC. He has also served on the board of directors for both NANOG and DNS-OARC, and has co-authored several internet Request for Comments.

Duane holds a Master of Science in telecommunications from the University of Colorado and a Bachelor of Science in physics from Washington State University.

Publications

Duane Wessels
Verisign's Transition to ECDSA. ICANN79
2024
Presentations / Panels
Ralf Weber, Duane Wessels
Real World Challenges with Large Responses, Truncation, and TCP. OARC 42
2024
Presentations / Panels
Duane Wessels
Verisign's Transition to ECDSA. OARC 42
2024
Presentations / Panels
Andrew Fregly, Joseph Harvey, Burt Kaliski, Duane Wessels
Stateless Hash-Based Signatures in Merkle Tree Ladder Mode (SLH-DSA-MTL) for DNSSEC
2023
Requests for Comments (RFC) / Internet Drafts
Duane Wessels
Deploying ZONEMD in the Root Zone. OARC 41
2023
Presentations / Panels
Duane Wessels
Transitioning Verisign’s TLDs to Elliptic Curve DNSSEC. OARC 41
2023
Presentations / Panels
Matt Thomas, Duane Wessels
A Study of Caching Behavior with Respect to Root Server TTLS. DNS-OARC Fall '15 Workshop
2015
Presentations / Panels
Duane Wessels
The EDNS Key Tag Option
2015
Requests for Comments (RFC) / Internet Drafts
Duane Wessels, Jason Castonguay
Thirteen Years of "Old J Root". DNS-OARC Fall '15 Workshop
2015
Presentations / Panels
Duane Wessels
Recent and Future Developments in DNS Security. NANOG-on-the-Road, Herndon, VA.
2015
Presentations / Panels
Liang Zhu, Duane Wessels, John Heideman, Allison Mankin
Connection-Oriented DNS to Improve Privacy and Security. IEEE S&P '15
2015
Publications / Papers
Duane Wessels
Effects of Increasing the Root Zone Key ZSK Size. DNS-OARC Spring '15 Workshop
2015
Presentations / Panels
John Heideman, Paul Hoffman, Zi Hu, Allison Mankin, Duane Wessels, Liang Zhu
TLS for DNS: Initiation and Performance Considerations. Internet-draft, WIP
2015
Requests for Comments (RFC) / Internet Drafts
Liang Zhu, Duane Wessels, John Heideman, Allison Mankin
Measuring DANE TLSA Deployment. TMA '15
2015
Publications / Papers
Duane Wessels, Casey Deccio
Removing Obstacles to DNSSEC Deployment. ICANN 52 DNSSSEC Workshop
2015
Presentations / Panels
John Dickinson, Ray Bellis, Allison Mankin, Duane Wessels
DNS Transport over TCP - Implementation Requirements (I-d wip)
2014
Requests for Comments (RFC) / Internet Drafts
Duane Wessels, Liang Zhu, Allison Mankin
A Survey of Current DANE/TLSA Deployment. DNS-OARC Fall '14 Workshop
2014
Presentations / Panels
Matt Thomas, Duane Wessels
Analysis of TCP traffic in DITL data. DNS-OARC Fall '14 Workshop
2014
Presentations / Panels
Liang Zhu, Zi Hu, John Heidemann, Duane Wessels, Allison Mankin, Nikita Somaiya
T-DNS: Connection-Oriented DNS to Improve Privacy and Security. ACM SIGCOMM '14 (Poster)
2014
Publications / Papers
Aziz Mohaisen, Duane Wessels
Open Resolvers in the com/net Resolution. DNS-OARC Workshop
2014
Publications / Papers
Duane Wessels
Authority server selection in DNS caching resolvers. ACM Computer Communication Review
2012
Publications / Papers
Duane Wessels
Evidence of Bitsquatting in COM/NET Queries. NANOG 54
2012
Presentations / Panels
Duane Wessels
Searching for Vulnerable DNSSEC RSA Keys. NANOG 55
2012
Presentations / Panels
Duane Wessels
Using Long TTLs to Survive DNS Attacks. DNS-OARC Workshop
2012
Presentations / Panels
Duane Wessels
Observations on UDP Checksum Errors in DNS. DNS-OARC Workshop
2011
Presentations / Panels
Duane Wessels
Tracking a DNS Reflection Attack. DNS-OARC Workshop
2011
Presentations / Panels
Duane Wessels
A Tool for Visualizing DNS Server Affinity. DNS-OARC Workshop
2010
Presentations / Panels
Duane Wessels
DNSSEC Deployment in the Root Zone. NANOG 48
2010
Presentations / Panels
Duane Wessels
The Day The Root Got Signed. NANOG 50
2010
Presentations / Panels
Duane Wessels
Understanding and preparing for DNS evolution. Traffic Monitoring and Analysis Workshop
2010
Presentations / Panels
Duane Wessels
DNSSEC, EDNS, and TCP. NANOG 46
2009
Presentations / Panels
Duane Wessels
Packet Traces from a Simulated Signed Root. DNS-OARC Workshop
2009
Presentations / Panels
Duane Wessels
Root Zone Augmentation Impact Analysis. NANOG 47
2009
Presentations / Panels
Duane Wessels
Studies on Root Zone Growth. DNS-OARC Workshop
2009
Presentations / Panels
Duane Wessels
A Day at the Root of the Internet. ACM Computer Communication Review
2008
Publications / Papers
Duane Wessels
IPv4 Heatmaps. NANOG 41
2007
Presentations / Panels
Duane Wessels
Passive Monitoring of DNS Anomalies. Conference on Detection of Intrusion & Malware, and Vulnerability Assessment
2007
Publications / Papers
Duane Wessels
Make Projects: Small Form Factor PCs
2006
Publications / Papers
Duane Wessels
Searching for DNS Cache Poisoners -- Lazy, Stupid, or Evil? NANOG 36
2006
Presentations / Panels
Duane Wessels
Is Your Caching Resolver Polluting the Internet? ACM SIGCOMM Workshop on Network Troubleshooting
2004
Publications / Papers
Duane Wessels
Measurements and Laboratory Simulations of the Upper DNS Hierarchy (2004). PAM
2004
Publications / Papers
Duane Wessels
Squid: The Definitive Guide
2004
Publications / Papers
Duane Wessels
Update on Anomalous DNS Behavior. NANOG 29
2003
Presentations / Panels
Duane Wessels
Wow, That's a Lot of Packets. PAM
2003
Publications / Papers
Duane Wessels
Toward Lowering the Load on DNS Root Nameservers. NANOG 26
2002
Presentations / Panels
Duane Wessels
Web Caching
2001
Publications / Papers