{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:Y7QNJNKZ3EESNV4PDAXF33GN7J","short_pith_number":"pith:Y7QNJNKZ","canonical_record":{"source":{"id":"2412.08478","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.NI","submitted_at":"2024-12-11T15:45:44Z","cross_cats_sorted":[],"title_canon_sha256":"e02604e4db1e269b5931164c57dfefbb0923c15dce87e18462ef0fea36578b9f","abstract_canon_sha256":"962927b6da5608f757b4fcb065d3f27b61b7e5c07adacbece3c200fb8c836e30"},"schema_version":"1.0"},"canonical_sha256":"c7e0d4b559d90926d78f182e5deccdfa55ebd052d3b35e5b72368847ecd67c74","source":{"kind":"arxiv","id":"2412.08478","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.08478","created_at":"2026-07-05T11:00:02Z"},{"alias_kind":"arxiv_version","alias_value":"2412.08478v2","created_at":"2026-07-05T11:00:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.08478","created_at":"2026-07-05T11:00:02Z"},{"alias_kind":"pith_short_12","alias_value":"Y7QNJNKZ3EES","created_at":"2026-07-05T11:00:02Z"},{"alias_kind":"pith_short_16","alias_value":"Y7QNJNKZ3EESNV4P","created_at":"2026-07-05T11:00:02Z"},{"alias_kind":"pith_short_8","alias_value":"Y7QNJNKZ","created_at":"2026-07-05T11:00:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:Y7QNJNKZ3EESNV4PDAXF33GN7J","target":"record","payload":{"canonical_record":{"source":{"id":"2412.08478","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.NI","submitted_at":"2024-12-11T15:45:44Z","cross_cats_sorted":[],"title_canon_sha256":"e02604e4db1e269b5931164c57dfefbb0923c15dce87e18462ef0fea36578b9f","abstract_canon_sha256":"962927b6da5608f757b4fcb065d3f27b61b7e5c07adacbece3c200fb8c836e30"},"schema_version":"1.0"},"canonical_sha256":"c7e0d4b559d90926d78f182e5deccdfa55ebd052d3b35e5b72368847ecd67c74","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:00:02.700752Z","signature_b64":"gZApyVsKkhl/nFAtunxy0WShmdbdvTQMLeqXwbGYyBBkqT/2Zc6b/eoHJSkFiyVwS882+96GTH+YDSVYAiTaDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c7e0d4b559d90926d78f182e5deccdfa55ebd052d3b35e5b72368847ecd67c74","last_reissued_at":"2026-07-05T11:00:02.700243Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:00:02.700243Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.08478","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:00:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WIX7xwtEaJ8l8oNp/PxCjwR1uYvTxTyvj5EteXG0oHpxLnukyT3Sp0ELdv3o52TC5Nr2HM5z3cBbcr4v6GEaAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T11:31:04.339790Z"},"content_sha256":"525efcac060debc72fa5343e50ff6ba11552cfa0796e7bf2465cd0d1cc9eb347","schema_version":"1.0","event_id":"sha256:525efcac060debc72fa5343e50ff6ba11552cfa0796e7bf2465cd0d1cc9eb347"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:Y7QNJNKZ3EESNV4PDAXF33GN7J","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ECSeptional DNS Data: Evaluating Nameserver ECS Deployments with Response-Aware Scanning","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.NI","authors_text":"Fahad Hilal, Georg Carle, Johannes Zirngibl, Kevin Vermeulen, Mattijs Jonker, Oliver Gasser, Patrick Sattler","submitted_at":"2024-12-11T15:45:44Z","abstract_excerpt":"DNS is one of the cornerstones of the Internet. Nowadays, a substantial fraction of DNS queries are handled by public resolvers (e.g., Google Public DNS and Cisco's OpenDNS) rather than ISP nameservers. This behavior makes it difficult for authoritative nameservers to provide answers based on the requesting resolver. The impact is especially important for entities that make client origin inferences to perform DNS-based load balancing (e.g., CDNS). The EDNS0 Client Subnet (ECS) option adds the client's IP prefix to DNS queries, which allows authoritative nameservers to provide prefix-based resp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.08478","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.08478/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:00:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cXQAss0gK7jV70WWYsXq1F51ShZVCWj0gT6IjDwu4LSJia6uyAF+2LGDhQ6gvlaubwqSroQF2riMbBSoyNJPDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T11:31:04.340648Z"},"content_sha256":"3a2b8331e63a6b14b36e102341f3e0429d753c61ea3697426e32ae984c876805","schema_version":"1.0","event_id":"sha256:3a2b8331e63a6b14b36e102341f3e0429d753c61ea3697426e32ae984c876805"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Y7QNJNKZ3EESNV4PDAXF33GN7J/bundle.json","state_url":"https://pith.science/pith/Y7QNJNKZ3EESNV4PDAXF33GN7J/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Y7QNJNKZ3EESNV4PDAXF33GN7J/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T11:31:04Z","links":{"resolver":"https://pith.science/pith/Y7QNJNKZ3EESNV4PDAXF33GN7J","bundle":"https://pith.science/pith/Y7QNJNKZ3EESNV4PDAXF33GN7J/bundle.json","state":"https://pith.science/pith/Y7QNJNKZ3EESNV4PDAXF33GN7J/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Y7QNJNKZ3EESNV4PDAXF33GN7J/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:Y7QNJNKZ3EESNV4PDAXF33GN7J","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"962927b6da5608f757b4fcb065d3f27b61b7e5c07adacbece3c200fb8c836e30","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.NI","submitted_at":"2024-12-11T15:45:44Z","title_canon_sha256":"e02604e4db1e269b5931164c57dfefbb0923c15dce87e18462ef0fea36578b9f"},"schema_version":"1.0","source":{"id":"2412.08478","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.08478","created_at":"2026-07-05T11:00:02Z"},{"alias_kind":"arxiv_version","alias_value":"2412.08478v2","created_at":"2026-07-05T11:00:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.08478","created_at":"2026-07-05T11:00:02Z"},{"alias_kind":"pith_short_12","alias_value":"Y7QNJNKZ3EES","created_at":"2026-07-05T11:00:02Z"},{"alias_kind":"pith_short_16","alias_value":"Y7QNJNKZ3EESNV4P","created_at":"2026-07-05T11:00:02Z"},{"alias_kind":"pith_short_8","alias_value":"Y7QNJNKZ","created_at":"2026-07-05T11:00:02Z"}],"graph_snapshots":[{"event_id":"sha256:3a2b8331e63a6b14b36e102341f3e0429d753c61ea3697426e32ae984c876805","target":"graph","created_at":"2026-07-05T11:00:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.08478/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"DNS is one of the cornerstones of the Internet. Nowadays, a substantial fraction of DNS queries are handled by public resolvers (e.g., Google Public DNS and Cisco's OpenDNS) rather than ISP nameservers. This behavior makes it difficult for authoritative nameservers to provide answers based on the requesting resolver. The impact is especially important for entities that make client origin inferences to perform DNS-based load balancing (e.g., CDNS). The EDNS0 Client Subnet (ECS) option adds the client's IP prefix to DNS queries, which allows authoritative nameservers to provide prefix-based resp","authors_text":"Fahad Hilal, Georg Carle, Johannes Zirngibl, Kevin Vermeulen, Mattijs Jonker, Oliver Gasser, Patrick Sattler","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.NI","submitted_at":"2024-12-11T15:45:44Z","title":"ECSeptional DNS Data: Evaluating Nameserver ECS Deployments with Response-Aware Scanning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.08478","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:525efcac060debc72fa5343e50ff6ba11552cfa0796e7bf2465cd0d1cc9eb347","target":"record","created_at":"2026-07-05T11:00:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"962927b6da5608f757b4fcb065d3f27b61b7e5c07adacbece3c200fb8c836e30","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.NI","submitted_at":"2024-12-11T15:45:44Z","title_canon_sha256":"e02604e4db1e269b5931164c57dfefbb0923c15dce87e18462ef0fea36578b9f"},"schema_version":"1.0","source":{"id":"2412.08478","kind":"arxiv","version":2}},"canonical_sha256":"c7e0d4b559d90926d78f182e5deccdfa55ebd052d3b35e5b72368847ecd67c74","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c7e0d4b559d90926d78f182e5deccdfa55ebd052d3b35e5b72368847ecd67c74","first_computed_at":"2026-07-05T11:00:02.700243Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:00:02.700243Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gZApyVsKkhl/nFAtunxy0WShmdbdvTQMLeqXwbGYyBBkqT/2Zc6b/eoHJSkFiyVwS882+96GTH+YDSVYAiTaDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:00:02.700752Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.08478","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:525efcac060debc72fa5343e50ff6ba11552cfa0796e7bf2465cd0d1cc9eb347","sha256:3a2b8331e63a6b14b36e102341f3e0429d753c61ea3697426e32ae984c876805"],"state_sha256":"93492bb9750fae30682f46520e4f300ff7620c37da6956610ed763f284910b7d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"82D5jhD+0iHcHWpS5SsiCFccYQVdCaxHNGWYcWczYERo+hiXZo33XzaUAiOUyJ7AWIcHXSf8hGYN2YLSYce4BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T11:31:04.346399Z","bundle_sha256":"88e570465693a132bb21a11664503b0e851212253f79f4db97ec94494b89d527"}}