Just a guy in Vermont trying to connect all the dots...
Dan York
Author's posts
Mar 27
TDYR #140 – Travelogue: The Long Journey Home From Singapore
TDYR #140 - Travelogue: The Long Journey Home From Singapore by Dan York
Mar 27
New IETF Mailing List To Discuss Privacy and Confidentiality of DNS
How can we better protect the privacy and confidentiality of DNS queries? While DNSSEC protects the integrity of answers coming back from DNS (i.e. ensuring they aren’t modified in transit), what can be done to protect the confidentiality and privacy of information retrieved from DNS? Particularly against the kind of pervasive monitoring and large-scale network sniffing we’ve become aware of?
We mentioned previously that at IETF 89 this month in London there was the “Encryption of DNS requests for confidentiality” (DNSE) BOF looking at these topics. There was vigorous discussion during that BOF and then at the DNSOP working group meeting. That large amount of interest has now sparked the creation of a new mailing list for all those interested in participating. This “dns-privacy” list is public and open to anyone to subscribe:
List address: dns-privacy@ietf.org
To subscribe: https://www.ietf.org/mailman/listinfo/dns-privacy
Archive: http://www.ietf.org/mail-archive/web/dns-privacy/
As you can see from the mailing list archive, there is already some discussion underway. If you want some background the Internet drafts draft-bortzmeyer-dnsop-dns-privacy and draft-koch-perpass-dns-confidentiality may be useful.
While this doesn’t specifically related to the DNSSEC topic we cover here on Deploy360, it is part of the same overall space of “making DNS more secure” and so I thought it would be useful to point people to this new list.
Working together as an industry and community, we can make DNS more secure! Please do join in and help out.
Mar 26
TDYR #139 – Final Day In Singapore: Running, DNSSEC And Meeting Great People
TDYR #139 - Final Day In Singapore: Running, DNSSEC And Meeting Great People by Dan York
Mar 26
Congratulations to Portugal’s .PT on their DNSSEC growth!
Tonight at the DNSSEC Implementers Gathering at ICANN 49 in Singapore, I was seated next to an attendee from the registry in Portugal that operates the .PT top-level domain and she let me know about some dramatic growth they had recently seen. She also clued me in to their dnssec.pt page that has their statistics and also info about DNSSEC workshops and other events (I’ve now added this to our DNSSEC Statistics page). As noted on the chart below from March 14, 2014, the big jump that happened for them was when their second largest registrar/DNS hosting provider jumped from 200 to 4,000 .PT domain names signed with DNSSEC.
This is compared to the chart from only 11 days earlier showing Flesk at 199 signed domains. In speaking with her this jump was apparently not due to any incentives but rather to a registrar looking to do the right thing and provide more security options to their customers.
Congratulations to the team at .PT for seeing this big jump in second-level domains!
Mar 25
DNSSEC Workshop on March 26 to Be Streamed Live from ICANN 49 in Singapore (Featured Blog)
If you are interested in DNSSEC and how it can make the Internet more secure, the DNSSEC Workshop at ICANN 49 in Singapore will be streamed live for anyone to listen and view. One of three DNSSEC-related technical events at ICANN 49, the DNSSEC Workshop takes place on Wednesday, March 26, from 8:30am - 2:45pm Singapore time. More...
Mar 25
Watch/Listen LIVE To The ICANN 49 DNSSEC Workshop On Wednesday, March 26
Want to learn about DNSSEC from people who have actually deployed DNSSEC in their region? Want to learn about DANE and how it can be used in applications? How can DNSSEC make the Internet more secure? As I mentioned last week, these are some of the topics that will be discussed in the ICANN 49 DNSSEC Workshop that will be streaming live out of Singapore on Wednesday, March 26, from 8:30am – 2:45pm Singapore time. The session will be recorded for those unable to watch live.
[WARNING: Singapore local time is UTC+8, so it is 7 hours ahead of Central European time, 12 hours ahead of US Eastern time and 15 hours ahead of US Pacific time. So if you are on the US East Coast, for example, this workshop will start at 8:30pm TONIGHT (Tuesday, March 25).]
Topics to be discussed include:
- DNSSEC Deployment Metrics
- DNSSEC Activities in the Asia Pacific Region
- Case study of the deployment of DNSSEC at .ee (Estonia)
- Guidance for Registrars in Supporting DNSSEC – and DNSSEC requirements in the 2013 Registrar Accreditation Agreement (RAA)
- Preparing for DNSSEC Root Key Rollover
- DNSSEC Applications
- Demonstration of DANE applications and tools
A full agenda and all of the available slides can be found on the ICANN 49 DNSSEC Workshop program page. You can watch or listen to the event via:
- Virtual Meeting Room Stream Live (video, audio, slides and chat)
- Audio stream (high bandwidth)
- Audio stream (low bandwidth)
The session should provide excellent information for people interested in DNSSEC and how we can make the Internet more secure. Please do join in!
And if you are interested in deploying DNSSEC, please check out our DNSSEC resource pages to learn more.
Mar 24
TDYR #137 – Travelogue: The Flight To Singapore, Initial Impressions And The First Day At ICANN 49 –
TDYR #137 - Travelogue: The Flight To Singapore, Initial Impressions And The First Day At ICANN 49 - by Dan York
Mar 24
FIR #749 – 3/31/14 – For Immediate Release
Neville's not available, Olivier Blanchard is guest co-host; Quick News: Google Glass in talks with Luxottica, USC to offer a journalism class in Google Glass, Facebook acquires Oculus Rift, will Twitter do away with @ symbol and hashtags?; Neville talks about two upcoming interviews; Ragan promo; News That Fits: a look at sentiment analysis, Michael Netzley's Asia Report, the death of Facebook organic reach, Media Monitoring Minute from CustomScoop, listener comments, Dan York's Tech Report, Igloo Software promo, recap of last week on the FIR Podcast Network, Olivier talks about his new novel; music from Make the Girl Dance; and more.
