25C3: Dan Kaminsky Invokes DNSSECDec 30, 2008, 19:02 (0 Talkback[s])
No-Size-Fits-All! An Application-Down Approach for Your Cloud Transformation REGISTER >
[ Thanks to Britta Wuelfing for this link. ]
"With the help of Internet veteran Paul Vixie, he had assembled around 15 DNS experts from the leading software makers into a room at Microsoft to discuss the consequences. The important thing for the participants was the simplicity of the solution so as to gain a better acceptance among system admins. If the DNS semantics would change even enough for just a percentage of hostnames not to be resolved, admins wouldn't bother to institute a patch. They would typically wait a few weeks after a vulnerability were announced before patching maybe half their systems. At that rate, about 75% of the systems would be patched, said Kaminsky proudly."
0 Talkback[s] (click to add your comment)