The hard work of deploying DNSSEC is well underway:  Registries are signing top-level zones, the Internet Systems Consortium and various vendors, including Infoblox, are simplifying the task of signing and managing a secure zone.  Even though widespread adoption of DNSSEC is some way off, it’s natural to wonder what’s next.

My bet is on IPv6.

Read more...

Whenever seismic activity picks up somewhere in the world, our local press here in California like to point out that we’re overdue for The Big One.  They cite how frequently, on average, large earthquakes occur on the various faults that we cross on our daily commutes and note that it’s been many times that long since those faults have experienced a major tremor.  Then they cut to footage of the aftermath of the Northridge or Loma Prieta earthquake or the movie “2012” and remind you to stock up on canned food, drinking water and ammunition.  Sensationalist, sure, but relatively tame when compared with most of the fear mongering they use to try to boost ratings.

I’m waiting for The Big One to strike the Internet.

Over the past several years, we’ve seen some large Distributed Denial of Service attacks against Internet infrastructure, including DNS.  In fact, as recently as August 6^th, the DNS hosting provider DNS Made Easy was hit with a DDoS attack that they estimated at “over 50 Gbps.”

Read more...

In the last few weeks, we passed two more important milestones in the deployment of DNSSEC:  the signing of the root zone and the .edu zone.  The root zone was signed July 15^th, and the .edu zone was signed on August 2^nd.

Read more...