About flippin' time
WooHoo...
VeriSign announced plans on Monday to roll out the DNSSec security standard for the web's .com and .net Top Level Domain Names (TLDs) by the first quarter of 2011. Short for Domain Name System Security Extensions Protocol, DNSSec is designed to guard against "man in the middle" and cache poisoning attacks that create a means for …
But most important, when will .xxx start using DNSSec? DNSSex? Oh.
Do I use the Paris or the joke icon, hm... Well, it's bad anyway.
Dan Kaminsky?
After his talk, his site was hacked, and has been offline since.
Also, does DNSSec mean that we'll get our NXDOMAIN responses back?
As long as they don't sign the root and have some bunch of schmucks from a government sit on it. That really should be done by, say, a council of private persons directly chosen by the community, and is not a task to be trusted to any single government, not even if we had a single world government.
Sign up, sign up for The Register's weekly IT security newsletter - click here