LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   General (https://www.linuxquestions.org/questions/general-10/)
-   -   DHS wants key to DNS root zone (https://www.linuxquestions.org/questions/general-10/dhs-wants-key-to-dns-root-zone-543693/)

Furlinastis 04-05-2007 08:09 PM

DHS wants key to DNS root zone
 
http://www.dailykos.com/story/2007/3/31/1828/16663
http://www.heise.de/english/newsticker/news/87655

"The key will play an important role in the new DNSSec security extension, because it will make spoofing IP-addresses impossible. By forcing the IANA [Internet Assigned Numbers Authority] to hand out a copy of the master key, the US government will be the only institution that is able to spoof IP addresses and be able to break into computers connected to the Internet without much effort."

I'm a little confused as to what exactly this implies. Does this mean that if the Department of Homeland Security actually gets its grubby little hands on this "master key" they will have the ability to hack into any website they feel dissents from their policies and essentially wipe the site off the face of the internet?

Crito 04-05-2007 09:25 PM

It means only they can spoof IP addys. And that's why no one will implement DNSSec.

Furlinastis 04-05-2007 10:09 PM

OH, so they're not even implementing it? Guess I got all hot and bothered for nothing then. Lol... reading it over, the word, "new" didn't quite register.

Crito 04-05-2007 11:42 PM

No, they are implementing it. It's not just a new DNS server/service though. It's a complete change to the DNS protocol itself. As such they're going to need other people's cooperation to get it implemented in a timely manner. And that just doesn't appear to be happening outside the USA, where many anycast root servers reside. :o


All times are GMT -5. The time now is 09:23 AM.