The post Worth Reading: Too big not to fail appeared first on rule 11 reader.
We’ve been working with registrars and registries in the IETF on making DNSSEC easier for domain owners, and over the next two weeks we’ll be starting out by enabling DNSSEC automatically for .dk domains.
Before we get into the details of how we've improved the DNSSEC experience, we should explain why DNSSEC is important and the function it plays in keeping the web safe.
DNSSEC’s role is to verify the integrity of DNS answers. When DNS was written in the early 1980’s, it was only a few researchers and academics on the internet. They all knew and trusted each other, and couldn’t imagine a world in which someone malicious would try to operate online. As a result, DNS relies on trust to operate. When a client asks for the address of a hostname like www.cloudflare.com, without DNSSEC it will trust basically any server that returns the response, even if it wasn’t the same server it originally asked. With DNSSEC, every DNS answer is signed so clients can verify answers haven’t been manipulated over transit.
If DNSSEC is so important, why do so few domains support it? First, for a domain to Continue reading
Barclay's CEO loses bonus after IT-based witchhunt
The post Musing: Barclays boss used bank’s security team to hunt for whistleblower -The Guardian appeared first on EtherealMind.
Derick Winkworth tells stories & shows his marketing prowess
The post The Road to Networking Hell is Paved With Good Intentions appeared first on EtherealMind.