Embed Size (px)
DESCRIPTION
The .INFO domain has been signed with Domain Name System Security Extensions (DNSSEC).
Citation preview
.INFO Gets Secured withDNSSEC
When you visit a website, or send an e-mail, can you be sure you are
communicating with the server that you think you are?
Today…
2(At least not with certainty)
ON
DNSSEC adds protection
• Domain Name Security Extensions (DNSSEC) protects the DNS from cache poisoning exploits – These can allow malicious entities to intercept an
Internet users’ request to access a website, and redirect or eavesdrop on the user without their knowledge, and with no ability to reassert control.
• DNSSEC introduces digital signatures to the DNS and automatically ensures that users are not hijacked and taken to an unintended destination.
DNSSEC adds digital signatures to each DNS transaction
• With DNSSEC, users and servers can verify DNS responses for:– Data integrity– Origin
authentication
• The data is protected. It does not matter what server or resolver provides the data.
4
afilias.info ?afilias.info ?
afilias.info69.46.124.40
afilias.info69.46.124.40
DOMAIN NAME SYSTEM
DNSSEC
ZONE SERVER
Internet user
How do I know if a .INFO is secured with DNSSEC?
Download the Mozilla Firefox plug-in at http://www.dnssec-validator.cz/
This screenshot was taken on September 1 before .INFO was signed. Because afilias.info did not have DNSSEC information, the plug-in showed
a white key with a red circle.
Once the .INFO zone and the second level domain afilias.info were signed, the plug-in changed to show a green key.
This confirms that the domain name is secured using DNSSEC technology and that the integrity of the DNS data has not been breached during transmission.
If you download the DNSSEC-Validator plug-in, be sure to check
your validator settings• Go to Tools>Add-ons
and Click Options under the DNSSEC Validator plug-in.
• Select your preference for validating resolvers.
Comcast customers can enter 75.75.75.75 or 75.75.76.76 under the Custom radio button. These resolvers can be used to validate DNSSEC as well as be used for everyday Web surfing.
These domains are participating in our “friends
and family” period
• Afilias.info• Info.info• Shinkuro.info• Comcast.info
Try them today!
![A measurement study of DNSSEC misconfigurations · zone draws importance for analysis as it was the first DNSSEC signed zone [15] in 2005, 5 years prior to the root domain, hence](https://img.pdfslide.us/doc/110x75/5f8c5d1fb8b59b59cd0f4ce9/a-measurement-study-of-dnssec-misconfigurations-zone-draws-importance-for-analysis.jpg)
