[dns-operations] Github Down cause of DNS (dyne) problem ?

Paul Ferguson fergie at people.ops-trust.net
Sat Oct 22 01:35:12 UTC 2016


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Don't let the perfect be the enemy of the good.

BCP38 is still STRONGLY encouraged globally.

Cheers,

- - ferg (BCP38 instigator)

On 10/21/2016 6:13 PM, David Conrad wrote:

> Viktor,
> 
> On October 21, 2016 at 11:01:46 AM, Viktor Dukhovni 
> (ietf-dane at dukhovni.org <mailto:ietf-dane at dukhovni.org>) wrote:
> 
>> Given the scale of recent attacks, perhaps the time has come for 
>> responsible networks to announce dates by which peering will
>> cease with parties that ignore BCP 38.
> 
> Initial reports suggest this attack is at least partially
> Mirai-based, thus BCP38 probably won't help.  That isn't to say we
> shouldn't push for BCP38, but it isn't a silver bullet.
> 
> I believe the real issue is that the vulnerabilities on the
> Internet are multifaceted and (in my opinion) highlight a
> fundamental architectural issue: end-to-end assumes all the brains
> are at the edges, however brains attract zombies and we've got
> tissue paper walls protecting us. Without vastly improved security,
> Internet of Things will become Internet of Zombies and I've long
> believed that it will simply not be possible for infrastructure
> providers, critical or not, to be able to scale their capacity to
> keep up.
> 
> So, sure, BCP38 is a great idea and everyone should do it, but it
> isn't going to solve the problem.
> 
> Regards, -drc (ICANN CTO, but speaking only for myself)
> 
> 
> _______________________________________________ dns-operations
> mailing list dns-operations at lists.dns-oarc.net 
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations 
> dns-operations mailing list 
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> 


- -- 
Paul Ferguson
ICEBRG.io, Seattle USA
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iF4EAREIAAYFAlgKwlAACgkQKJasdVTchbLbJAEAuNNokoGECffR5uBlkzIFADcz
gErwiifbZ0cEG9Qjm8UA/RVSvK1fMFCTE63s/LS7TbADKZFq3iSLVOsiHCLYPz/6
=cWfn
-----END PGP SIGNATURE-----



More information about the dns-operations mailing list