[dns-operations] Announcement: Test Report on DNSSEC impact on SOHO CPE
Ray.Bellis at nominet.org.uk
Ray.Bellis at nominet.org.uk
Mon Sep 15 14:16:22 UTC 2008
Dear Colleagues,
We would like to announce the publication of a joint study entitled
"DNSSEC Impact on Broadband Routers and Firewalls", available for
download at:
http://download.nominet.org.uk/dnssec-cpe/DNSSEC-CPE-Report.pdf
In summary (based on 24 tested units):
"... we conclude that just 6 units (25%) operate with full DNSSEC
compatibility "out of the box." 9 units (37%) can be reconfigured to
bypass DNS proxy incompatibilities. Unfortunately, the rest (38%) lack
reconfigurable DHCP DNS parameters, making it harder for LAN clients to
bypass their interference with DNSSEC use.
These findings, their potential impact on DNSSEC use by broadband
consumers, and implications for router/firewall manufacturers, are
presented and analyzed in this report. "
Ray Bellis
Senior Researcher in Advanced Projects
Nominet UK
Lisa A. Phifer
President, Core Competence, Inc.
More information about the dns-operations
mailing list