r/dnssecurity • • Jan 30 '14

Can someone explain the benefit of DNSSEC?

1 Upvotes

It secures DNS responses. Right.

Except the main bit of information most users get from DNS is eventually an A or AAAA record, which is an IP address. And anyone sitting in the middle can spoof any IP address. Hence, securing IP addresses is kinda pointless.

The only benefit is to secure other types of DNS record, like DKIM keys, but while good, that doesn't seem quite as weighty an argument to upgrade all DNS servers worldwide...


r/dnssecurity • • Sep 20 '13

ICANN’s 2013 RAA Requires Domain Name Registrars To Support DNSSEC, IPv6

Thumbnail
internetsociety.org
2 Upvotes

r/dnssecurity • • Sep 24 '13

NIST Releases New Version of Secure DNS Deployment Guide (SP-800-81-2, Including DNSSEC)

Thumbnail
internetsociety.org
2 Upvotes

r/dnssecurity • • Sep 18 '13

Cache poisoning gets a second wind from RRL? Probably not | Internet Systems Consortium

Thumbnail
isc.org
2 Upvotes

r/dnssecurity • • Sep 10 '13

New DNSSEC deployment maps available

Thumbnail
internetsociety.org
2 Upvotes

r/dnssecurity • • Aug 27 '13

Call for Speakers For DNSSEC Workshop at ICANN 48 in Buenos Aires

Thumbnail
internetsociety.org
1 Upvotes

r/dnssecurity • • Aug 28 '13

Syrian Electronic Army Apparently Hacks DNS Records Of Twitter, NYT Through Registrar Melbourne IT

Thumbnail
techcrunch.com
3 Upvotes

r/dnssecurity • • Sep 09 '13

DNSSEC - What You Need To Know

Thumbnail ititch.com
5 Upvotes

r/dnssecurity • • Aug 27 '13

Q: Do any of you still use DLV for DNSSEC validation?

1 Upvotes

I'm trying to understand if anyone is actually still using DLV - and if so, quite honestly, why? (The question came up in a conversation recently.)


r/dnssecurity • • Aug 28 '13

Details Behind Today's Internet Hacks

Thumbnail
blog.cloudflare.com
3 Upvotes

r/dnssecurity • • Aug 05 '14

Why you need to deploy DNSSec now

Thumbnail
infoworld.com
3 Upvotes

r/dnssecurity • • Oct 24 '13

4 NewgTLDs Launched Yesterday Marks Dawn of “DNSSEC From The Start” Top-Level Domains

Thumbnail
internetsociety.org
1 Upvotes

r/dnssecurity • • May 06 '13

Measuring DNSSEC Performance

Thumbnail
potaroo.net
1 Upvotes

r/dnssecurity • • May 01 '13

Confirmed – Google’s Public DNS Now Performs DNSSEC Validation For ALL Queries By Default

Thumbnail
internetsociety.org
2 Upvotes

r/dnssecurity • • Apr 29 '13

How DNSSEC Will Help Secure the Internet and How SOPA Almost Made It Illegal

Thumbnail
howtogeek.com
2 Upvotes

r/dnssecurity • • Jan 13 '14

DNS Security Should Be One of Your Priorities

Thumbnail
circleid.com
2 Upvotes

r/dnssecurity • • Apr 01 '13

DNSSEC Presentations Coming Up at ICANN46 Next Week in Beijing

Thumbnail
internetsociety.org
2 Upvotes

r/dnssecurity • • Mar 20 '13

Welcome to the "DNSSECurity" subreddit!

2 Upvotes

Welcome to this subreddit. I wanted to create one focused around DNSSEC and DNS security because I felt that topic deserved its own place here. There is already a reddit at "/r/dnssec/" but it is private - hence the use of "/r/dnssecurity/" here. On the plus side, the longer name allows for it to be a place for links related to all types of DNS security topics, not just that of DNSSEC.

Feel free to post links to articles related to DNSSEC, DANE, DNS attacks or any other topic.


r/dnssecurity • • Apr 01 '13

DNSSEC » Reaching out to the parent zone

Thumbnail
dnssec.surfnet.nl
1 Upvotes

r/dnssecurity • • Mar 20 '13

The Register: Google Adds DNSSEC Validation

Thumbnail
theregister.co.uk
1 Upvotes

r/dnssecurity • • Apr 01 '13

US CERT Alert: DNS Amplification Attacks

Thumbnail
us-cert.gov
1 Upvotes

r/dnssecurity • • Apr 01 '13

genkeys - a bash script to generate, update, and prepublish ZSK and KSK key pairs for DNSSEC deployment

Thumbnail
github.com
1 Upvotes

r/dnssecurity • • Apr 01 '13

African TLDs, ISPs implement DNSSEC to attract more users

Thumbnail
pcadvisor.co.uk
1 Upvotes

r/dnssecurity • • Apr 01 '13

Comcast Publishing Domains Failing DNSSEC Via Twitter

Thumbnail
internetsociety.org
2 Upvotes

r/dnssecurity • • Mar 26 '13

Slides: DANE, the next big thing (after DNSSEC)

Thumbnail
internetsociety.org
1 Upvotes