Feeds

DNSSEC finally goes mainstream

VeriSign enables more secure tech on .com top-level domain

Beginner's guide to SSL certificates

DNSSEC, a more secure version of the internet domain name to IP address lookup protocol, was enabled on the .com top-level domain on Thursday.

The move by VeriSign, the operator of .com, marks an important milestone in the adoption of the technology, now accessible to 80 million registered domains.

The internet's root servers at the top of the DNS (Domain Name System) hierarchy added DNSSEC support last July. More than 25 top-level domains—including .gov, .org, .edu and .net—have enabled DNSSEC since then.

DNSSEC, or DNS Security Extensions, uses cryptographic checks to make sure that IP results returned by a DNS query point to the corresponding domain name. The technology is a countermeasure against DNS cache-poisoning attacks, such as those famously highlighted by security researcher Dan Kaminsky back in 2008.

The technology has existed for more than a decade and is seen as an important safeguard against certain types of "man in the middle" and cache-poisoning attacks. Despite its longevity, awareness of the importance of the protocol remains patchy.

For example, half the security experts quizzed in a recent survey by internet security firm IID (Internet Identity) admitted they either knew nothing about DNSSEC or only had limited familiarity with the protocol. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
Ello? ello? ello?: Facebook challenger in DDoS KNOCKOUT
Gets back up again after half an hour though
SHELLSHOCKED: Fortune 1000 outfits Bash out batches of patches
CloudPassage points to 'pervasive' threat of Bash bug
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.