25C3: Dan Kaminsky Invokes DNSSEC

[ Thanks to Britta Wuelfing for this link. ]

"With the help of Internet veteran Paul Vixie, he had assembled around 15 DNS experts from the leading software makers into a room at Microsoft to discuss the consequences. The important thing for the participants was the simplicity of the solution so as to gain a better acceptance among system admins. If the DNS semantics would change even enough for just a percentage of hostnames not to be resolved, admins wouldn't bother to institute a patch. They would typically wait a few weeks after a vulnerability were announced before patching maybe half their systems. At that rate, about 75% of the systems would be patched, said Kaminsky proudly."

Complete Story

Related Stories:

• 2008: Bigger Networks and the DNS Boogyman(Dec 19, 2008)
• Coalition to Secure DNS Takes Shape(Dec 08, 2008)
• IETF: Should We Ignore the Kaminsky Bug?(Nov 21, 2008)
• Dumb and Dumber Proprietary Innovation Strikes Again(Aug 27, 2008)
• Nominum Solves Kaminsky Attack(Aug 27, 2008)
• Where Are All the Dangerous DNS Exploits? Nowhere and Everywhere(Aug 08, 2008)