ISC StormCast for Wednesday, May 25th 2016

Verisign/US-Cert Warn of The Use of Local TLDs for WPAD
http://www.verisign.com/assets/labs/MitM-Attack-by-Name-Collision-Cause-Analysis-and-WPAD-Vulnerability-Assessment-in-the-New-gTLD-Era.pdf
Proposal To Use TLS for DNS
https://www.rfc-editor.org/rfc/rfc7858.txt
Azure Blacklists Common Password
https://blogs.technet.microsoft.com/ad/2016/05/24/another-117m-leaked-usernames-and-passwords-new-best-practices-azuread-and-msa-can-help/
Google Attempts to Eliminate Passwords
http://www.androidauthority.com/google-kills-passwords-trust-api-694394/