Posts Tagged ‘DNSSec’

CommunityDNS has signed the ccTLD, .SH with DNSSEC. “We are pleased to move this security initiative forward!” states Paul Kane, CEO of CommunityDNS. Having already signed the ccTLD for .TM in the original batch of signed TLDs added to the ROOT, “Continuing the process with .SH was the next logical step. It is important for [...]


What is the responsibility of the DNS? Should the DNS be responsible for policing traffic across its infrastructure? Should the blocking and blacklisting of names or throttling of query packets be the responsibility of the DNS? From experience I know my opening paragraph has started passionate debates in more than one section of this globe. [...]


2010 was a busy year for the Internet in general and was a wonderfully busy year for CommunityDNS.  As 2011 begins we can’t help but reflect on the various milestones reached within the CommunityDNS family. Along with the Internet’s two major developments, being DNSSEC and IDNs, other items of note for 2010 include DNS Resilience, [...]


What is so secret about the word, “Capacity”? As I read and talk with people I realize the word, “capacity” is typically missing from the DNS discussion. “Capacity” and “Security” are the two cornerstones to maximizing DNS resilience; both of which are typically missing from the DNS discussion. Have you seen a single DNS node [...]


DNSSEC adoption has been slow, but is now picking up speed, thanks to organizations leading the way. In October, 2009 the .TM registry signed with DNSSEC.   In June, 2010 both .ORG and .EURid both announced the signing of their registries with DNSSEC.  Before .TM other registries have also signed with DNSSEC, those being .SE, .BR, [...]


(click image to enlarge) Capacity and scalability are necessary in managing DNSSEC and D/DoS. Capacity, necessary for maintaining operations during D/DoS attacks, is also necessary for increased traffic due to DNSSEC deployment. Scalability is highly important, as DNSSEC is deployed not only will greater traffic levels will be encountered, greater demand will be placed on [...]


Important due to increased traffic from DNSSEC implementation During our work with the DNS Infrastructure Resilience Task Force research yielded 770 different DDoS attacks occurred around the globe on 6 June, 2009.  On average research revealed the probability of 1,300 DDoS attacks happening every day, equaling roughly 3% of the Internet’s daily traffic.  During the [...]


Last September a study was conducted regarding the signing of the L-Root.  The study, “Root Zone Augmentation and Impact Analysis” examined the impact the signing of the root would have on BIND and NSD platforms. NSD 3.2.1 at 5,000 queries per second in a signed zone of 1 million names dropped 22% of UDP traffic. [...]


Chosen by the DNS Infrastructure Resilience Task Force (DIR), CommunityDNS is pleased to finalize its part in the European Commission’s study regarding DNS resilience for the EU and its Member States.  Officially titled, “Initiative for the Development and Coordination of Technologies and Methodologies for Resilience of the DNS Infrastructure in and among European Union Member [...]


CommunityDNS looks back at 2009′s achievements and forward to 2010.



Follow

Get every new post delivered to your Inbox.