<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:admin="http://webns.net/mvcb/"
	xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
	<channel>
		<title>CircleID: DNSSEC</title>
		<link>http://www.circleid.com/</link>
		<description>Latest DNSSEC related postings on CircleID</description>
		<dc:language>en</dc:language>
		<dc:rights>Copyright 2008, unless where otherwise noted.</dc:rights>
		<dc:date>2008-12-04T09:46:00-08:00</dc:date>
		<image>
			<title>CircleID</title>
			<width>130</width>
			<height>45</height>
			<url>http://www.circleid.com/images/logo_rss.gif</url>
			<link>http://www.circleid.com/</link>
		</image>
		
		<item>
			<title>Industry Coalition Announced to Increase Adoption of DNSSEC</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20081203_coalition_to_increase_adoption_of_dnssec/</guid>
			<link>http://www.circleid.com/posts/20081203_coalition_to_increase_adoption_of_dnssec/</link>
			<description><![CDATA[The DNSSEC Industry Coalition is a global group of registries and industry experts whose mission is to work collaboratively to facilitate adoption of Domain Name Security Extensions (DNSSEC) and streamline the implementations across Domain Name Registries. <a href="http://www.circleid.com/posts/20081203_coalition_to_increase_adoption_of_dnssec/">More...</a>]]></description>
			<dc:date>2008-12-03T11:55:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>domain_registries</category><category>security</category>
		</item>
		
		<item>
			<title>Feds Urged to Deploy DNSSEC and Signing of the Root Zone</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/feds_urged_to_deploy_dnssec/</guid>
			<link>http://www.circleid.com/posts/feds_urged_to_deploy_dnssec/</link>
			<description><![CDATA[Security experts and leading vendors are urging the U.S. federal government for the rapid adoption of DNSSEC and signing of the root zone. In recent weeks, the National Telecommunications and Information Administration (NTIA) has received 30-plus comments in favor of securing DNS root zone data. These comments are from the Internet Architecture Board (IAB) and the Internet Society as well as ISPs and domain name operators such as PayPal, Akamai Technologies, NeuStar, Comcast and Afilias. <a href="http://www.circleid.com/posts/feds_urged_to_deploy_dnssec/">More...</a>]]></description>
			<dc:date>2008-11-25T16:04:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>security</category>
		</item>
		
		<item>
			<title>IETF Debates DNS Security: Fix It or Push for DNSSEC</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/ietf_debates_dns_security_dnssec/</guid>
			<link>http://www.circleid.com/posts/ietf_debates_dns_security_dnssec/</link>
			<description><![CDATA[The Internet engineering community is grappling with what to do about a serious flaw in the DNS discovered this summer, and the ongoing debate brings to mind a famous quotation from Voltaire: "The perfect is the enemy of the good." At issue is whether the group should use its resources to encourage DNS registries, ISPs and enterprises to upgrade to the ultimate DNS security solution known as DNSSEC; or whether it should tweak the DNS protocols to address the so-called 'Kaminsky bug' as an interim step. The issue is being debated at a meeting of the IETF, the Internet's leading standards body, being held here this week. <a href="http://www.circleid.com/posts/ietf_debates_dns_security_dnssec/">More...</a>]]></description>
			<dc:date>2008-11-20T13:47:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>security</category>
		</item>
		
		<item>
			<title>Despite Baffling Delays in DNSSEC, Wide&#45;Spread Adoption Close, Says DNS Inventor Paul Mockapetris</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/dnssec_adoption_close_says_mockapetris/</guid>
			<link>http://www.circleid.com/posts/dnssec_adoption_close_says_mockapetris/</link>
			<description><![CDATA[Flaws in the current DNS system, most notably the Kaminsky Vulnerability publicly exposed in July 2008, have left Internet uses exposed to potential attacks. DNS inventor Dr. Paul Mockapetris, chief scientist and chairman of IP address infrastructure software provider Nominum, points out that the DNSSEC has been under development for 15 years and the adoption remains low with only Sweden and Puerto Rico signing up to the system. "It baffles me," Mockapetris said of the delay. "On the one hand I'm never baffled by how long standards processes take, but 15 years sounds like a lot to me. I think we've lost 10 years of progress with DNS technology due to this stupid food fight around DNSSEC. We've been at it for 10 years, I think there's five years of good work there." <a href="http://www.circleid.com/posts/dnssec_adoption_close_says_mockapetris/">More...</a>]]></description>
			<dc:date>2008-11-17T12:00:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>security</category>
		</item>
		
		<item>
			<title>Why DNS is Broken, in Plain English</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20081113_why_dns_broken_in_plain_english/</guid>
			<link>http://www.circleid.com/posts/20081113_why_dns_broken_in_plain_english/</link>
			<description><![CDATA[At ICANN's meeting in Egypt last week, I had the opportunity to try and explain to various non-technical audiences why the Domain Name System (DNS) is vulnerable to attack, and why that is important, without needing a computer science degree to understand it. Here is the summary. <a href="http://www.circleid.com/posts/20081113_why_dns_broken_in_plain_english/">More...</a>]]></description>
			<dc:date>2008-11-13T19:26:00-08:00</dc:date>
			<category>internet</category><category>cyberattack</category><category>dns</category><category>dnssec</category><category>security</category>
		</item>
		
		<item>
			<title>Proposal for Signing the DNSSEC Root</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20081113_proposal_signing_dnssec_root_zone/</guid>
			<link>http://www.circleid.com/posts/20081113_proposal_signing_dnssec_root_zone/</link>
			<description><![CDATA[The U.S. National Telecommunications and Information Administration (NTIA) is soliciting comments on signing the DNSSEC root. Ignore the caption on the page: this is not about DNSSEC deployment, which is already happening just fine. It's about who gets to sign the root zone. <a href="http://www.circleid.com/posts/20081113_proposal_signing_dnssec_root_zone/">More...</a>]]></description>
			<dc:date>2008-11-13T09:52:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>internet_governance</category><category>security</category>
		</item>
		
		<item>
			<title>DNSSEC FUD Buster: DNSSEC is Not Necessary?</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20081106_dnssec_fud_buster_necessary/</guid>
			<link>http://www.circleid.com/posts/20081106_dnssec_fud_buster_necessary/</link>
			<description><![CDATA[.ORG, The Public Interest Registry is pleased to announce the next guest blogger for our DNSSEC FUD Buster series. Ram Mohan is the Executive Vice President, & Chief Technology Officer of Afilias Limited. Ram has led the strategic growth initiatives at Afilias Limited in registry services and security as well as new product sectors such as RFID/Auto-ID, global DNS and Internationalized Domain Names (IDNs). <a href="http://www.circleid.com/posts/20081106_dnssec_fud_buster_necessary/">More...</a>]]></description>
			<dc:date>2008-11-06T00:55:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>domain_registries</category><category>security</category><category>top_level_domains</category>
		</item>
		
		<item>
			<title>DNSSEC &quot;FUD&quot; Buster: Don&apos;t Panic</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20081027_dnssec_fud_buster_do_not_panic/</guid>
			<link>http://www.circleid.com/posts/20081027_dnssec_fud_buster_do_not_panic/</link>
			<description><![CDATA[.ORG, The Public Interest Registry is pleased to announce of first guest blogger for our DNSSEC FUD series. John Kristoff works as a research analyst for Team Cymru, a Internet Security Research company based in Chicago specializing in the 'who' and the 'why' of Internet crime. <a href="http://www.circleid.com/posts/20081027_dnssec_fud_buster_do_not_panic/">More...</a>]]></description>
			<dc:date>2008-10-27T12:46:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>domain_registries</category><category>security</category>
		</item>
		
		<item>
			<title>U.S. Department of Commerce Seeking Public Comments for Deployment of DNSSEC</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/us_department_of_commerce_dnssec/</guid>
			<link>http://www.circleid.com/posts/us_department_of_commerce_dnssec/</link>
			<description><![CDATA[During a conference, "Internet of Things," in France, the U.S. Department of Commerce made the announcement that it will hold a public consultation on the different proposals to cryptographically sign the DNS root zone file, and determine who will hold the root zone trust anchor for global DNSSEC implementation, says Milton Mueller on the <em>Internet Governance Forum</em> blog. The blog, titled "Commerce Department asks the world to comment on its plans to retain control of the root," continues... <a href="http://www.circleid.com/posts/us_department_of_commerce_dnssec/">More...</a>]]></description>
			<dc:date>2008-10-10T08:35:00-08:00</dc:date>
			<category>internet</category><category>dnssec</category><category>internet_governance</category><category>security</category>
		</item>
		
		<item>
			<title>.ORG Talks with Dan Kaminsky on DNSSEC</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20081001_org_dan_kaminsky_dnssec/</guid>
			<link>http://www.circleid.com/posts/20081001_org_dan_kaminsky_dnssec/</link>
			<description><![CDATA[The following post is based on a recent discussion .ORG had with Dan Kaminsky, a DNS expert best know for discovering a serious DNS bug, about DNSSEC and how it is a critical step toward bolstering Internet security. <a href="http://www.circleid.com/posts/20081001_org_dan_kaminsky_dnssec/">More...</a>]]></description>
			<dc:date>2008-10-01T11:46:01-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>domain_registries</category><category>security</category><category>top_level_domains</category>
		</item>
		
		<item>
			<title>U.S. Government Begins Largest Deployment of DNSSEC</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/us_government_largest_dnssec_deployment/</guid>
			<link>http://www.circleid.com/posts/us_government_largest_dnssec_deployment/</link>
			<description><![CDATA[Untied States government has launched an extensive deployment of DNS Security Extensions (DNSSEC) on the .gov top-level domain, and some expect that once that rollout is complete, banks and other businesses might be encouraged to follow suit for their sites. The National Telecommunications and Information Administration (NTIA), the arm of the U.S. government that oversees the Internet's DNS infrastructure, has not set a deadline for DNSSEC deployment for the root servers, .com or .net. "A DNSSEC signed root zone would represent one of the most significant changes to the DNS infrastructure since it was created; therefore any changes cannot be taken lightly considering that the Internet DNS is a global infrastructure on which the global economy relies,'' according to an NTIA statement. <a href="http://www.circleid.com/posts/us_government_largest_dnssec_deployment/">More...</a>]]></description>
			<dc:date>2008-09-22T07:58:00-08:00</dc:date>
			<category>internet</category><category>dnssec</category><category>security</category>
		</item>
		
		<item>
			<title>Study Assesses Potential Impact of DNSSEC on Broadband Consumers, Results Not Good</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/dnssec_broadband_consumers/</guid>
			<link>http://www.circleid.com/posts/dnssec_broadband_consumers/</link>
			<description><![CDATA[Recent collaborative test by <a href="http://www.corecom.com">Core Competence</a> and <a href="http://www.nominet.org.uk">Nominet</a> have concluded that 75% of common residential and small SOHO routers and firewall devices used with broadband services do not operate with full DNSSEC compatibility "out of the box". The report presents and analyzes technical findings, their potential impact on DNSSEC use by broadband consumers, and implications for router/firewall manufacturers. Included in its recommendations, the report suggests that as vendors apply DNSSEC and other DNS security fixes to devices, consumers should be encouraged to upgrade to the latest firmware. <a href="http://www.circleid.com/posts/dnssec_broadband_consumers/">More...</a>]]></description>
			<dc:date>2008-09-15T13:21:00-08:00</dc:date>
			<category>internet</category><category>broadband</category><category>dnssec</category><category>security</category>
		</item>
		
		<item>
			<title>.ORG Applauds US Government on DNSSEC</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/88291_org_government_dnssec/</guid>
			<link>http://www.circleid.com/posts/88291_org_government_dnssec/</link>
			<description><![CDATA[.ORG applauds the US Government's decision last week to require all users of the .GOV domain to implement DNSSEC, and even more importantly, to sign the .GOV root. .ORG is the first generic Top Level Domain authorized by ICANN to implement DNSSEC, and we are hard at work putting together a comprehensive plan to roll it out. <a href="http://www.circleid.com/posts/88291_org_government_dnssec/">More...</a>]]></description>
			<dc:date>2008-08-29T11:09:00-08:00</dc:date>
			<category>internet</category><category>dnssec</category><category>security</category><category>top_level_domains</category>
		</item>
		
		<item>
			<title>On the Pressing Need for a Signed Root</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/88183_pressing_need_for_a_signed_root/</guid>
			<link>http://www.circleid.com/posts/88183_pressing_need_for_a_signed_root/</link>
			<description><![CDATA[Attacks on the security of the Internet have been much in the news lately, and there is an increased urgency to take the technical steps to combat these attacks. .ORG has been doing its part to lead this process by <a href="http://www.circleid.com/posts/87213_pir_org_top_level_domain_dnssec/">taking introductory steps to implement DNSSEC (Domain Name System Security Extensions)</a>... In order to make DNSSEC effective, there is one additional step that is needed -- "signing the root". <a href="http://www.circleid.com/posts/88183_pressing_need_for_a_signed_root/">More...</a>]]></description>
			<dc:date>2008-08-18T13:45:00-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>domain_registries</category><category>security</category><category>top_level_domains</category>
		</item>
		
		<item>
			<title>Is This Only Sloppy Wording by ICANN?</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/is_this_only_sloppy_wording_by_icann/</guid>
			<link>http://www.circleid.com/posts/is_this_only_sloppy_wording_by_icann/</link>
			<description><![CDATA[So I wrote earlier that I though it was good stuff when ICANN released a paper on DNS Security. Yes, I think it was good this paper was released, and yes it points out correctly how important DNSSEC is. But, now when reading it in detail, I find two things that troubles me. And it has to do with management of .ARPA. A top level domain that is used for infrastructural purposes. Like IP-addresses and E.164 numbers... <a href="http://www.circleid.com/posts/is_this_only_sloppy_wording_by_icann/">More...</a>]]></description>
			<dc:date>2008-07-25T08:47:01-08:00</dc:date>
			<category>internet</category><category>dns</category><category>dnssec</category><category>internet_governance</category><category>law</category><category>security</category>
		</item>
		
	</channel>
</rss>