Monday, June 27, 2011

Introducing Secure DNS: New Global Internet Security System




A stronger internet security system is deployed
(from mercurynews on 6-26-2011)
Add caption
A small group of Internet security specialists gathered in Singapore this week to start up a global system to make email and e-commerce more secure, end the proliferation of passwords and raise the bar significantly for Internet scam artists, spies and troublemakers. "It won't matter where you are in the world or who you are in the world, you're going to be able to authenticate everyone and everything," said Dan Kaminsky, an independent network security researcher who is one of the engineers .  

The Singapore event included an elaborate technical ceremony to create and then securely store numerical keys that will be kept in three hardened data centers there, in San Jose, Zurich and Singapore. The keys and data centers are working parts of a technology known as Secure DNS, or DNSSEC. DNS refers to the Domain Name System, which is a directory that connects names to numerical Internet addresses. Preliminary work on the security system had been going on for more than a year, but this was the first time the system went into operation, even though it is not quite complete.  The three centers are fortresses made up of five layers of physical, electronic and cryptographic security, making it virtually impossible to tamper with the system. Four layers are active now. The fifth, a physical barrier, is being built inside the data center.. read more».

WHAT IS DNSSEC?

DNSSEC, DNS Security Extensions, is a set of extensions to DNS, which provide origin authentication of DNS data, data integrity, and authenticated denial of existence.  DNSSEC covers all DNS data including name to IP address translation for web servers, voice over IP (VoIP), email, chat protocols, etc.

Enhanced by Zemanta

Disqus for ePayment News