Skip to main content

DNS Tool Research

Publications & Research

Scientific papers, case studies, and governance documents. Every claim is backed by data you can verify with standard tools. Every paper is independently citable.

Scientific Papers

DNS Tool Methodology The primary methodology paper. Defines how DNS Tool collects, analyzes, and scores DNS security posture. Covers the multi-source intelligence audit pipeline, confidence taxonomy, and scoring framework. PDF Balboa, 2026 377 KB Philosophical Foundations The epistemological framework. Examines why DNS Tool uses Aristotelian analytical categories, how the five reporting perspectives map to Rhetoric and Nicomachean Ethics, and the philosophy of measurement behind the scoring engine. PDF Balboa, 2026 807 KB

Case Studies — Domain Confessions

#1: Forgotten Domain A domain registered for ten years with no published mail policy is not dormant — it is exposed. Reputation systems do not distinguish between negligence and compromise. Video February 2026 SPF · DMARC · Null MX #2: The Intelligence Agency That Chose to Watch Two intelligence agencies are the only federal agencies in our 13-agency survey that have not upgraded to DMARC reject — eight years after the binding directive. Their DNS records suggest this may be deliberate. Case Study March 2026 DMARC · BOD 18-01 · Forensic Reporting · 13 Federal Agencies

Governance & Standards

Founder’s Manifesto The aspirational design philosophy that motivates DNS Tool's architecture. Non-normative — declares design targets, not proven states. Where it says [MUST], it sets a bar, not a baseline. HTML PDF 379 KB Communication Standards The measurable quality gate for all DNS Tool output. Defines clarity requirements, vision accessibility standards, acronym expansion rules, and the manual review checklist. HTML PDF 367 KB Rules of Engagement Operational boundaries and ethical constraints for DNS Tool's scanning and analysis capabilities. Defines what we will and will not do with the data we collect. HTML

Technical Documentation

Approach & Methodology How and why DNS Tool works the way it does. The public-facing methodology overview, five reporting perspectives, and the rigor behind the analysis engine. HTML Architecture System architecture, component diagram, and the pipeline that powers DNS Tool's multi-source intelligence audit. HTML Confidence Framework The ICD 203-derived confidence taxonomy. How DNS Tool assigns confidence levels to its findings and why the scoring engine distinguishes between observed fact and analytical inference. HTML Sources & Citations Every RFC, standard, directive, and external source cited by DNS Tool. Structured citations with DOI references where available. HTML Reference Library Archived primary sources: military standards, intelligence community directives, FBI IC3 reports, IETF Internet-Drafts, and peer-reviewed vision science research. Downloadable PDFs preserved against link rot. HTML PDFs
Cite this project: DOI 10.5281/zenodo.18854899 · Citation formats
Straight talk about your data.

We use two cookies, both essential:

  • _csrf — Prevents cross-site request forgery. Required for form submissions. Security-only.
  • _dns_session — Only exists if you choose to sign in. No account required to use DNS Tool.

We log your IP address for two reasons: rate limiting (so nobody abuses the service) and security (identifying malicious actors and complying with legal obligations). We check source geography for analysis accuracy — DNS responses vary by region, and knowing which resolver answered from where makes the science better.

No tracking cookies. No analytics cookies. No ad networks. No data brokers. Our code is open-core — the application framework is publicly available under BUSL-1.1 with timed Apache-2.0 conversion. Verify it yourself.

If you create an account and want out, account deletion removes your login and scan history. Public domain analyses remain available because they contain only public DNS records, already hashed. Full details: Privacy Policy.