Lost in the Edge: Finding Your Way with DNSSEC Signposts / Aug 2013
Paper on DNSSEC-based Signpost servers for better p2p communications at USENIX FOCI. This paper expands on our SIGCOMM demo, presenting the full technical details of how Signposts uses DNSSEC to provide secure peer-to-peer communications and NAT traversal. The system enables users to establish direct connections between their personal devices even when separated by complex network middleboxes. By building on DNS infrastructure and adding cryptographic authentication, Signposts provides a practical solution to the end-to-end connectivity problems plaguing modern networks.