OpenDNSSEC to the rescue

OpenDNSSEC to the rescue

Summary: The release of a working version of OpenDNSSEC gives the open source process another shot at getting DNS right.

SHARE:
TOPICS: Browser, Security
6

The Internet's domain name service (DNS) is based on open source BIND.

Trouble is BIND is insecure. As security expert Dan Kaminsky discovered in 2008 the cache can be poisoned, people redirected to malware sites.

So do you go with something proprietary, like Skye? You could, but there is another option, OpenDNSSEC, which hit Version 1.0 this week.

OpenDNSSEC adds digital signatures to DNS requests before they are acted upon. It's still not perfect. Until standards are developed you need to connect with your parent zone registrar periodically to assure security.

But it's a lot better than nothing. Nothing is, unfortunately, what a lot of sites are offering.

The release of a working version of OpenDNSSEC gives the open source process another shot at getting DNS right. Big companies are earning big money keeping customers' DNS secure. If you are a big company such protection will look cheap.

If you are not a big company, however, you may not be able to afford that kind of security. The fact so many companies can't afford it also helps the bad guys.

Like everyone else I don't know everything, and I do make mistakes. But I try to fix my mistakes and when I don't know something I know who to call, or how to find who to call.

OpenDNSSEC should be on every good security manager's bookmarks.

Topics: Browser, Security

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

6 comments
Log in or register to join the discussion
  • Message has been deleted.

    zakkiromi
  • Message has been deleted.

    zakkiromi
  • RE: OpenDNSSEC to the rescue

    The release of a working version of OpenDNSSEC gives the open source process another shot at getting DNS right. Big companies are earning big money keeping customers DNS secure. If you are a big company such protection will look cheap.<a href="http://www.accessmedicalbooks.com/"><font color="white"> bz visit</font></a> <a href="http://www.cartecampus.com/"><font color="white"> ca visit</font></a> <a href="http://www.internetparalaevangelizacion.org/"><font color="white"> cb visit</font></a><a href="http://www.asklocal.biz/"><font color="white"> cc visit</font></a><a href="http://www.brennanstandsalone.com/"><font color="white"> cd visit</font></a><a href="http://www.estudielenco.net/"><font color="white"> ce visit</font></a> <a href="http://www.soshaiti2008.com/"><font color="white"> cf visit</font></a> <a href="http://www.newyork-auto.net/"><font color="white"> cg visit</font></a></a><a href="http://www.storabokbytardagenimariefred.com/"><font color="white"> ci</font></a> <a href="http://www.keysfresno.com/"><font color="white"> cj</font></a> <a href="http://www.trustedcondoms.com/"><font color="white"> ck</font></a> <a href="http://www.lakersforgovernor.com/"><font color="white"> cl</font></a><a href="http://storabokbytardagenimariefred.com/2010/03/04/se-hit-alla-butiksinnehavare/"><font color="white"> cl</font></a><a href="http://riotfest.net/tag/scandinavian"><font color="white"> cm</font></a><a href="http://www.chicago-water-damage.info/"><font color="white"> cn</font></a><a href="http://www.esn-nederland.org/"><font color="white"> co</font></a><a href="http://www.spayandneuterus.org/"><font color="white"> cp</font></a><a href="http://www.dabrunorestokosher.com/"><font color="white"> cq</font></a><a href="http://www.gburgtv.com/"><font color="white"> cr</font></a><a href="http://www.gburgtv.com/contact-us"><font color="white"> cs</font></a><a href="http://www.gburgtv.com/our-company"><font color="white"> ct</font></a><a href="http://www.gburgtv.com/upcoming-events"><font color="white"> cu</font></a><a href="http://www.envisionnbstsa.com/"><font color="white"> cv</font></a>
    zakkiromi
    • RE: OpenDNSSEC to the rescue

      OpenDNSSEC should be on every good security managers bookmarks. Trouble is BIND is insecure. As security expert Dan Kaminsky discovered in 2008 the cache can be poisoned, people redirected to malware sites.<br><br>So do you go with something proprietary, like Skye? You could, but there is another option, OpenDNSSEC, which hit Version 1.0 this week.<br><br>OpenDNSSEC adds digital signatures to DNS requests before they are acted upon. Its still not perfect. Until standards are developed you need to connect with your parent zone registrar periodically to assure security. OpenDNSSEC should be on every good security managers bookmarks. Trouble is BIND is insecure. As security expert Dan Kaminsky discovered in 2008 the cache can be poisoned, people redirected to malware sites.

      So do you go with something proprietary, like Skye? You could, but there is another option, OpenDNSSEC, which hit Version 1.0 this week.

      OpenDNSSEC adds digital signatures to DNS requests before they are acted upon. Its still not perfect. Until standards are developed you need to connect with your parent zone registrar periodically to assure security.<a href="http://www.wa2dci.com/"><font color="light&height"> al</font></a> <a href="http://www.funds-china.com/"><font color="light&height"> am</font></a> <a href="http://www.britishshakespeare.com/"><font color="light&height"> an</font></a> <a href="http://www.6999999.com/"><font color="light&height"> ao</font></a> <a href="http://www.belex-homes.com/"><font color="light&height"> ap</font></a> <a href="http://www.basistrening.com/"><font color="light&height"> aq</font></a> <a href="http://www.estudielenco.net/"><font color="light&height"> ar</font></a> <a href="http://www.landrac.com/"><font color="light&height"> as</font></a> <a href="http://www.nikkeibp-chinese.com/"><font color="light&height"> at</font></a> <a href="http://www.expressnetairlines.com/"><font color="light&height"> au</font></a> <a href="http://www.israeliharvestcooperative.com/"><font color="light&height"> av</font></a> <a href="http://www.revistaurbanismo.com/"><font color="light&height"> aw</font></a> <a href="http://www.roypac.com/"><font color="light&height"> ax</font></a> <a href="http://www.asklocal.biz/"><font color="light&height"> ay</font></a> <a href="http://www.eriteatteri.com/"><font color="light&height"> az</font></a> <a href="http://cgaya.com/"><font color="light&height"> ba</font></a> <a href="http://s-aquarion.com/"><font color="light&height"> bb</font></a> <a href="http://ili-inter.com/"><font color="light&height"> bc</font></a> <a href="http://asyouare.net/"><font color="light&height"> bd</font></a> <a href="http://blueampu.net/"><font color="light&height"> be</font></a> <a href="http://calciofc.net/"><font color="light&height"> bf</font></a> <a href="http://citaweb.net/"><font color="light&height"> bg</font></a> <a href="http://djxm.net/"><font color="light&height"> bh</font></a> <a href="http://eravaruste.net/"><font color="light&height"> bi</font></a> <a href="http://joysoft.net/"><font color="light&height"> bk</font></a> <a href="http://opendoorbc.net/"><font color="light&height"> bl</font></a> <a href="http://parentel.net/"><font color="light&height"> bm</font></a> <a href="http://riotfest.net/"><font color="light&height"> bn</font></a> <a href="http://th-haint.com/"><font color="light&height"> bo</font></a> <a href="http://unitedcms.net/"><font color="light&height"> bp</font></a> <a href="http://quennie.net/"><font color="light&height"> bq</font></a> <a href="http://cress-inc.net/"><font color="light&height"> br</font></a> <a href="http://www.teamnorrland.net/"><font color="light&height"> bs</font></a> <a href="http://www.netzaesthetik.com/"><font color="light&height"> bt</font></a> <a href="http://www.tasteofthepast.com/"><font color="light&height"> bu</font></a> <a href="http://www.hemofilia-malaga.org/"><font color="light&height"> bv</font></a><a href="http://www.scjsw.info/"><font color="light&height"> bw</font></a><a href="http://www.digipro-audiovisuel.com/"><font color="light&height"> bx</font></a><a href="http://www.bilfingerberger-bot.com/"><font color="light&height"> by</font></a>
      Bonek suroboyo
      • RE: OpenDNSSEC to the rescue

        OpenDNSSEC adds digital signatures to DNS requests before they are acted upon. Its still not perfect. Until standards are developed you need to connect with your parent zone registrar periodically to assure security.<br><br>But its a lot better than nothing. Nothing is, unfortunately, what a lot of sites are offering.<br><br>The release of a working version of OpenDNSSEC gives the open source process another shot at getting DNS right. Big companies are earning big money keeping customers DNS secure. If you are a big company such protection will look cheap.<br><br>If you are not a big company, however, you may not be able to afford that kind of security. The fact so many companies cant afford it also helps the bad guys. OpenDNSSEC should be on every good security managers bookmarks. Trouble is BIND is insecure. As security expert Dan Kaminsky discovered in 2008 the cache can be poisoned, people redirected to malware sites.

        So do you go with something proprietary, like Skye? You could, but there is another option, OpenDNSSEC, which hit Version 1.0 this week.

        OpenDNSSEC adds digital signatures to DNS requests before they are acted upon. Its still not perfect. Until standards are developed you need to connect with your parent zone registrar periodically to assure security.<a href="http://www.bsoleb.org/"><font color="light&height"> a </font></a> <a href="http://www.asiamf.org/"><font color="light&height"> b </font></a> <a href="http://www.globalcontemporaryfineart.com/"><font color="light&height"> c</font></a> <a href="http://www.leedphilly.com/"><font color="light&height"> d</font></a> <a href="http://www.crescenciohernandez.com/"><font color="light&height"> e</font></a> <a href="http://www.edifyonline.net/"><font color="light&height"> f</font></a> <a href="http://www.columbiaslongestdays.info/"><font color="light&height"> g</font></a> <a href="http://www.anangrymob.com/"><font color="light&height"> h</font></a> <a href="http://www.performingalileo.net/"><font color="light&height"> i</font></a> <a href="http://www.methkillswyoming.org/"><font color="light&height"> j</font></a> <a href="http://www.edra41.org/"><font color="light&height"> k</font></a> <a href="http://www.spindletopsteakhouse.com/"><font color="light&height"> l</font></a> <a href="http://www.splashgraphicsllc.com/"><font color="light&height"> m</font></a> <a href="http://www.abnamro-uae.com/"><font color="light&height"> n</font></a> <a href="http://www.cadepc.com/"><font color="light&height"> o</font></a> <a href="http://www.hcenr.org/"><font color="light&height"> p</font></a> <a href="http://www.poliesportiu-cellera.org/"><font color="light&height"> q</font></a> <a href="http://www.stljewishvideos.com/"><font color="light&height"> r</font></a> <a href="http://www.communitypharmacyofsarasota.org/"><font color="light&height"> s</font></a> <a href="http://www.gaporganikkongre.org/"><font color="light&height"> t</font></a> <a href="http://www.isupportbridgewater.com/"><font color="light&height"> u</font></a> <a href="http://www.sportpsychexpo.com/"><font color="light&height"> v</font></a> <a href="http://www.brennanstandsalone.com/"><font color="light&height"> w</font></a> <a href="http://www.connectechporthuron.org/"><font color="light&height"> x</font></a> <a href="http://www.houseofkidsnyc.com/"><font color="light&height"> y</font></a> <a href="http://www.soshaiti2008.com/"><font color="light&height"> z</font></a> <a href="http://www.corporate-fussballwm.com/"><font color="light&height"> aa</font></a> <a href="http://www.nationalshakespeareday.com/"><font color="light&height"> ab</font></a> <a href="http://www.knightsforobama.org/"><font color="light&height"> ac</font></a> <a href="http://www.actioniseloquence.net/"><font color="light&height"> ad</font></a> <a href="http://www.careerteampartners.com/"><font color="light&height"> ae</font></a> <a href="http://www.bueydecabeza.com/"><font color="light&height"> af</font></a> <a href="http://www.makeawishhawaii.net/"><font color="light&height"> ag</font></a> <a href="http://www.magistralianucleo.org/"><font color="light&height"> ah</font></a> <a href="http://www.silcon.org/"><font color="light&height"> ai</font></a> <a href="http://www.workingclasshero.us/"><font color="light&height"> aj</font></a> <a href="http://www.fwtrack.com/"><font color="light&height"> ak</font></a>
        Bonek suroboyo
  • Message has been deleted.

    efsane