How do you know when a domain is failing DNSSEC validation? What if there was a way to let the broader industry know about these validation failures? The folks over at Comcast’s DNS team have been trying an experiment for a while in posting these DNSSEC validation failures publicly to Twitter at: https://twitter.com/comcastdns If you Read more…
What are “negative trust anchors” for DNSSEC? What function do they perform? Why do we need them? In this video, Dan York interviews Jason Livingood about his Internet-Draft on this topic and answers these and other questions: The Internet-Draft can be found at: http://tools.ietf.org/html/draft-livingood-negative-trust-anchors Jason and his co-author are seeking comment and would appreciate feedback Read more…
Google provides DNSSEC validation through the use of their “Google Public DNS” servers. If your local DNS resolvers do not perform DNSSEC validation, you can change your operating system to point to the following DNS servers operated by Google for either (or both) IPv4 and IPv6: 8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844 Once configured, all future DNS Read more…
In a huge step forward for Internet security today, Google announced that Google’s “Public DNS” service is now performing DNSSEC validation. What this means is that anyone using Google’s DNS servers (and anyone can do so – see below) can now get the increased security that comes with DNSSEC. (Learn more about the value of DNSSEC on Read more…
Looking for news about DNS and DNSSEC that is happening around the Internet? If so, check out: dnssexy.net DNSsexy is a news aggregation site built and maintained by Jan-Piet Mens that pulls together DNS-related items from a variety of blogs and news sources. Do note that this is DNS in general… so it covers a Read more…
This Thursday and Friday I (Dan York) will be at the “Securing and Trusting Internet Names (SATIN) 2012” event taking place at the National Physical Laboratory (NPL) in London, UK. As the event site indicates, this event is a bit of a merger of academia and industry: SATIN aims to provide a forum for academic Read more…