[Cerowrt-devel] [Internet Service] Providers ignore routing and DNS security: experts

[Cerowrt-devel] [Internet Service] Providers ignore routing and DNS security: experts

[Jim Reisert AD1C]

"The temporary re-routing of the network that hosts Google's public
Domain Name System (DNS) servers shows that large parts of the
internet are open to hijacking, with attackers easily being able to
capture, alter and redirect traffic without users' knowledge, experts
say."

http://www.itnews.com.au/News/375374,providers-ignore-routing-and-dns-security-experts.aspx

-- 
Jim Reisert AD1C, <jjreisert@alum.mit.edu>, http://www.ad1c.us

Re: [Cerowrt-devel] [Internet Service] Providers ignore routing and DNS security: experts

[Jim Gettys]

[-- Attachment #1: Type: text/plain, Size: 1186 bytes --]

On Wed, Mar 19, 2014 at 7:12 PM, Jim Reisert AD1C <jjreisert@alum.mit.edu>wrote:

> "The temporary re-routing of the network that hosts Google's public
> Domain Name System (DNS) servers shows that large parts of the
> internet are open to hijacking, with attackers easily being able to
> capture, alter and redirect traffic without users' knowledge, experts
> say."
>
>
> http://www.itnews.com.au/News/375374,providers-ignore-routing-and-dns-security-experts.aspx


I gather from folks at Google that they have been working on DNSsec for a
while. It's more complicated for Google's services than for most people.
 This was from interactions before this event.

Dunno when they will start turning it on.  It will be phased in across
different services at different times.  I suspect this event has upped the
urgency, of course.  And whether others are learning from this event is as
always unclear.
                                 - Jim


>
> --
> Jim Reisert AD1C, <jjreisert@alum.mit.edu>, http://www.ad1c.us
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
>

[-- Attachment #2: Type: text/html, Size: 2530 bytes --]