Group items tagged

Product alert - but this one is free! Symantec have released 'Norton Everywhere' which aims to provide a holistic security solution to all internet devices. What this means for DNS is rather than defaulting to the DNS server of your internet provider you can use choose to use the Norton DNS. This will filter insecure sites and guard against malicious DNS attacks. Symantec isn't the first to provide such a service. If Norton doesn't appeal there are other free DNS options such as Google Public DNS an OpenDNS. Changing your default DNS setting to one of these providers seems like a worthwhile thing to do.

The year was 2008. The person was Dan Kaminsky. The discovery: DNS has security flaws. Translation: the website you are visiting may not actually be the genuine site. This might take you 15 minutes to read through, and perhaps longer to absorb....but I highly recommend spending time on learning about the technicalities of DNS and the vulnerabilities of its functionality. The discovery of its weak points is what DNS security is addressing. Briefly, it covers the distributed nature of DNS, how cache poisoning occurs and patch recommendations to provide a 'fix'.

How DNS server stuff ups caused China's firewall to go global in places recently - just like when Sweden disappeared for a few hours in 2009.

Yahoo has made public its proposal to hack the domain name system (DNS) so as to resolve issues with migrating to IPv6 from IPv4. Internet protocol version 4 (IPv4) was the first widely deployed version of IP that supports 32 bit addresses (equating to 4,294,967,296). The issue of exhausting the 32 bit address allocation was identified in the 1990's, prompting the development of IPv6. IPv6 supports 128 bit addresses, obviously offering a more expansive address system. The article claims that a 'significant percentage of internet users have broken IPv6 connectivity'. Yahoo thus proposes to switch users to IPv4 connectivity once detection of broken IPv6 connectivity is realised. Yahoo will forward its proposal to the Internet Engineering Task Force, however questions of DNS trust and security will surely be the two topics of debate in testing this proposal.

DNSSEC was developed to add security to the Domain Name System . The tool works by adding information on the origin of authentication of DNS data, data integrity and authenticated denial of existence. DNSSEC obviously adds more information to queries and therefore increases the size of those query packets. Where older routers exist the additional information included in the larger data packets may not be recognised and therefore the DNS will not be resolved. The end user, in this instance, would not be able to visit the site they requested. The fear campaigns in the community have been around that very point: that the implementation of DNSSEC will not resolve host names. This article provides some light explanation around the rollout of DNSSEC and lays to rest the fear mongering by stating that there, to date, has been minimum negative effect of the DNSSEC that has been rolled out.

'Educause', a not for profit organisation supporting education in Information Technology, has released an excellent guide explaining DNS Security. It explains the primary benefit of incorporating DNSSEC, namely that it will '...expand the trustworthiness-and thus the usefulness-of the Internet as a whole.'.

The internet community has long been waiting for ICANN to deal with the evolving DNS issues inherent in the decentralised system. The appointment of Whit Diffie as Vice President for Information Security and Cryptography at ICANN should bode well amidst the criticisms of ICANN not doing enough in responding to domain name security hacks and attacks. The Canadian Press has said "While ICANN does not run many of these domain name servers directly, it can press for the use of a security protocol that is meant to verify that the directory information is authentic. The technology uses mathematical techniques similar to encryption.".

During a speech at the Media Institute in Washington [February 24, 2010], Larry Strickling, President Obama's top official at the Department of Commerce and administrator of the National Telecommunications and Information Administration (NTIA), suggested that there should be policy discussions between government agencies, foreign governments and key Internet constituencies on issues such as privacy, child protection, cybersecurity, copyright protection and Internet governance. "It's now time to respond to all the social changes being driven by the growth of the Internet," Strickling said. "We need Internet Policy 3.0. We enter this new decade recognizing that we rely on the Internet for essential social purposes: health, energy efficiency, and education. It's also a general engine for economic and social innovation. We must take rules more seriously if we want full participation, but we must keep the need for flexibility in mind."

Yugoslavia disappeared in the 1990s but the domain lingered on.

Gary Kim is referring to a survey made by e-marketer to point out that in the US the disparities in Internet usage between "Asians", "Hispanics", "Afro americans" and "white americans" will have almost disappeared, mostly because of the expansion of mobile phones giving access to Internet.

The topic of domain names as a commodity isn't new, but the prices auctions are fetching for names is. When $2 million is refused for 'jeans.com' it paints a picture of the cost/benefit ratio of domain investment - where the potential financial benefits are clearly outweighing initial costs. The trend developing is for multinational companies to buy domain names with commonly understood verbs (eg dating.com) or nouns (eg books.com). It strengthens their own branded domain name and targets consumers who are undertaking searches on the net for the thing they want - be it a service or good - as opposed to searching for the company that sells that thing. Does it suggest that searching habits are changing? Is brand awareness and brand loyalty losing power?