Experts blame United States for DNS Security Hole! Problem still not fixed.
- 3 Comment
The blame game has begun!
Check out the following from a story from the wired blog:
Despite a recent high-profile vulnerability that showed the net could be hacked in minutes, the domain name system — a key internet infrastructure — continues to suffer from a serious security weakness, thanks to bureaucratic inertia at the U.S. government agency in charge, security experts say. ………..
“The National Telecommunications and Information Administration, an agency of the Department of Commerce, is the show-stopper here,” Woodcock said…….
“If the root isn’t signed, then no amount of work that responsible individuals and companies do to protect their domains will be effective,” Woodcock said.. “You have to follow the chain of signatures down from the root to the top-level domain to the user’s domain. If all three pieces aren’t there, the user isn’t protected.”
While Bill Woodcock, research director at the nonprofit Packet Clearing House, may be right but that’s not the whole story. Something else is going on here. NTIA is saying that it is doing what it can and at proper speed.
We wrote about this massive security risk almost 3 weeks ago: http://dnblogger.com
One must wonder that why is it taking so long to fix this problem, especially when the solutions are already available as per the experts.
We have always favored US control over the internet DNS root zone, but if USA can not get this issue resolved promptly then it’s a real shame.
It does not matter who is responsible for doing what, what matters is that the US has power to get it done. US controls the DNS root and US controls ICANN.
We hope that both US and ICANN take this security hole problem seriously and resolve it ASAP.
Otherwise, all websites are at risk.
3 Comments on this post
Trackbacks
-
Damir said:
It is interesting how we people tend to point the blame on someone other than ourselfes.
The DNS Security Hole came about due to the lack of security in that area.
In some way’s it is good that this weakness was exposed so the problem should be fixed.
August 14th, 2008 at 6:29 pm -
DNBlogger said:
What bothers me is that this massive security issue has not been fixed almost after a month of finding about it.
August 14th, 2008 at 9:01 pm -
Renee said:
Is the dns root security hole fixed yet?
Haven’t heard the status of this issues lately anywhere.August 31st, 2008 at 9:30 pm
