|
The U.S. government is on the way to implement the Internet’s addressing system vulnerable to hackers. For the purpose the Domain Name System (DNS) root zone would be cryptographically signed using Domain Name and Addressing System Security Extensions (DNSSEC), with set of protocols that allows DNS records to carry a digital signature.
The root zone is the top list of hackers where computers can go to look up an address in a particular domain such as “.com.” The DNS translates Web site names into a numerical IP (Internet Protocol) address, which is used by computers to find a Web site. Several security problems within the DNS make it possible for hackers to supply a different IP address for a Web site.
Implementing DNSSEC would also introduce new steps in how changes to the root zone are published. As it stands now, TLD operators send changes to the Internet Assigned Numbers Authority, which is part of the Internet Corporation for Assigned Names and Numbers. ICANN then sends the changes to the U.S. National Telecommunications and Information Administration, which is part of the U.S. Department of Commerce. After approval, VeriSign — a commercial company — modifies the root file and sends it to the operators of the 13 root servers around the world.
The heavy involvement of the U.S. government, as well as the interests of VeriSign, in how the Internet’s addressing system is administered has drawn criticism that the process is too U.S.-centric.
And there appears to be a battle brewing over which entity will manage the cryptographic keys required to sign the root zone file.
Related posts:
Related posts brought to you by Yet Another Related Posts Plugin.