[dns-operations] Announcement: Test Report on DNSSEC impact on SOHO CPE

Peter Dambier peter at peter-dambier.de
Mon Sep 15 17:44:40 UTC 2008

Hi Ray,

thank you for the report.

I am missing the AVM Fritzbox stuff. They are almost a monopoly here
in Germany because they are sponsored by ISPs.

The result should compare to the 17. Netopia.

Especially the Telekom / T-Online variety has very old software.

Linux 2.4.17 malta mips from May 2005,
guess how many bugs in bind have been fixed in the meantime :)

kind regards

Ray.Bellis at nominet.org.uk wrote:
> Dear Colleagues,
> We would like to announce the publication of a joint study entitled
> "DNSSEC Impact on Broadband Routers and Firewalls", available for
> download at:
>   http://download.nominet.org.uk/dnssec-cpe/DNSSEC-CPE-Report.pdf
> In summary (based on 24 tested units):
> "... we conclude that just 6 units (25%) operate with full DNSSEC
>  compatibility "out of the box."  9 units (37%) can be reconfigured to
>  bypass DNS proxy incompatibilities.  Unfortunately, the rest (38%) lack
>  reconfigurable DHCP DNS parameters, making it harder for LAN clients to
>  bypass their interference with DNSSEC use.
>  These findings, their potential impact on DNSSEC use by broadband
>  consumers, and implications for router/firewall manufacturers, are
>  presented and analyzed in this report. "
> Ray Bellis
> Senior Researcher in Advanced Projects
> Nominet UK
> Lisa A. Phifer
> President, Core Competence, Inc.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Peter and Karin Dambier
Cesidian Root - Radice Cesidiana
Rimbacher Strasse 16
D-69509 Moerlenbach-Bonsweiher
+49(6209)795-816 (Telekom)
+49(6252)750-308 (VoIP: sipgate.de)
mail: peter at peter-dambier.de

More information about the dns-operations mailing list