|
ABSTRACT:
What's needed today is DNSSEC, more formally known as DNS Security Extensions. These help defend against some of the aforementioned attacks against DNS servers, either enterprise servers or the root DNS servers that run the Internet and have twice successfully been attacked. DNSSEC provides origin authentication of DNS data, data integrity and authenticated denial of existence, according to the project's website. Numerous problems have inhibited widespread deployment, namely issues with scalability and compatibility with different DNS servers.
|