Are you aware of your DNS Security Needs?

With all the news lately about a newly discovered DNS vulnerability , the need for DNSSEC is becoming more pronounced perhaps to a more mainstream audience. This recent flurry of news comes on the heels of .ORG, The Public Interest Registry, being approved by ICANN to offer DNSSEC services. We believe the time has come to step up on this important issue for the good and the future of the internet, so we are taking the lead among gTLDs to close this flaw in the DNS.

It’s important for the general public to be aware of the vulnerabilities, and to understand the meaning and effect of “cache-poisoning” and “unauthorized redirects”. Through this awareness we can truly appreciate the importance and urgency of DNSSEC implementation. SVP of Policy, David Maher posted at the beginning of the month on our approval from ICANN and our first phase of development . Not only are we signed up for implementing DNSSEC in the .ORG zone, but we are also calling on and encouraging our industry partners to participate with us in our planning to ensure a smooth rollout across all affected infrastructure.

I am also calling on the non-technical community to learn more about the DNS vulnerability and its implication to your business, until such time as safeguards such as DNSSEC are available for deployment.

Here is some recommended reading:
• US-CERT Vulnerability Notice
• DNS Cache Poisoning backgrounder