Some may have problems with the internet - DNSSEC

[ocexyz]

This is automated translation. Original source in Polish is here. Perhaps some of you will find this as reminder.

>>>
Some may have problems with the internet

04-05-2010 20:26

Tomorrow, May 5, at 16.00 Polish time of Internet users may experience connection problems with the network. Finished the first phase of the implementation of DNSSEC at the top 13 Internet servers.

This is an extension of the authentication of DNS data source by using cryptographic techniques. Introducing DNSSEC is designed to protect against certain types of Internet attacks, such as the man-in-the-middle. Specialists, who praised the decision of ICANN to introduce DNSSEC also warned that if the owner of the network's infrastructure is not prepared to cooperate with the extension, its customers may have problems.

The standard DNS queries are sent in individual packages of up to 512 bits. Part of an older network equipment is pre-configured in such a way that when you receive a package with a greater length, they are automatically blocked. From 1916 hours, May 5, all queries will have the length up to 2 kilobytes. For now, There will be a test, but since July 1 the system will apply to the entire Internet.

Experts say that while DNSSEC is implemented for some time, but not everyone can be prepared for him. With the extension currently uses the majority of those 13 servers, but if in one of the local networks, by leaving it older or misconfigured hardware, packets are not passed, they were redirected to other servers, hitting at the end of the one that the DNSSEC is not yet used. Users of these networks can, therefore, only to experience delays. Tomorrow, you may find that their network has stopped working, because the data will not be passed to any of the main servers.

Experts believe that the vast part of the ISP is ready to DNSSEC and more home users should not notice anything tomorrow. The trouble may have some companies that use their own DNS server, and their administrators do not think the appropriate action. Moreover, in many cases, administrators may be totally surprised and will not be able to understand how the sudden problems with the network.

Any problems do not become apparent immediately. In some cases, may occur only after several days because of the computers are being included in some of the time, and others are working without a break and keep the cached DNS data.


Author: Mariusz Blonski
<<<