ISC Praises Momentous Step Forward in Securing the Domain Name System

win32sux · 07-17-2010, 05:40 AM

Quote:

ISC joined other key participants of the internet technical community in celebrating the achievement of a significant milestone for the Domain Name System today as the root zone was digitally signed for the first time. This marked the deployment of the DNS Security Extensions (DNSSEC) at the top level of the DNS hierarchy and ushers the way forward for further roll-out of DNSSEC in the top level domains and DNS Service Providers.

Complete Article

Thanks to Slashdot for covering this.

unSpawn · 07-17-2010, 06:15 AM

Long time overdue. Never thought I'd see it happen. Doubleplusgood.

win32sux · 07-17-2010, 06:29 PM

The future does indeed look a bit brighter now.

win32sux · 07-28-2010, 05:23 PM

Quote:

Part of ICANN’s security scheme is the Domain Name System Security, a security protocol that ensures Web sites are registered and “signed” (this is the security measure built into the Web that ensures when you go to a URL you arrive at a real site and not an identical pirate site). Most major servers are a part of DNSSEC, as it's known, and during a major international attack, the system might sever connections between important servers to contain the damage.

A minimum of five of the seven keyholders – one each from Britain, the U.S., Burkina Faso, Trinidad and Tobago, Canada, China, and the Czech Republic – would have to converge at a U.S. base with their keys to restart the system and connect eveything once again.

Complete Article

Thanks to Bruce Schneier for covering this.