[dns-operations] Github Down cause of DNS (dyne) problem ?
Paul Ferguson
fergie at people.ops-trust.net
Sat Oct 22 01:35:12 UTC 2016
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Don't let the perfect be the enemy of the good.
BCP38 is still STRONGLY encouraged globally.
Cheers,
- - ferg (BCP38 instigator)
On 10/21/2016 6:13 PM, David Conrad wrote:
> Viktor,
>
> On October 21, 2016 at 11:01:46 AM, Viktor Dukhovni
> (ietf-dane at dukhovni.org <mailto:ietf-dane at dukhovni.org>) wrote:
>
>> Given the scale of recent attacks, perhaps the time has come for
>> responsible networks to announce dates by which peering will
>> cease with parties that ignore BCP 38.
>
> Initial reports suggest this attack is at least partially
> Mirai-based, thus BCP38 probably won't help. That isn't to say we
> shouldn't push for BCP38, but it isn't a silver bullet.
>
> I believe the real issue is that the vulnerabilities on the
> Internet are multifaceted and (in my opinion) highlight a
> fundamental architectural issue: end-to-end assumes all the brains
> are at the edges, however brains attract zombies and we've got
> tissue paper walls protecting us. Without vastly improved security,
> Internet of Things will become Internet of Zombies and I've long
> believed that it will simply not be possible for infrastructure
> providers, critical or not, to be able to scale their capacity to
> keep up.
>
> So, sure, BCP38 is a great idea and everyone should do it, but it
> isn't going to solve the problem.
>
> Regards, -drc (ICANN CTO, but speaking only for myself)
>
>
> _______________________________________________ dns-operations
> mailing list dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
- --
Paul Ferguson
ICEBRG.io, Seattle USA
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iF4EAREIAAYFAlgKwlAACgkQKJasdVTchbLbJAEAuNNokoGECffR5uBlkzIFADcz
gErwiifbZ0cEG9Qjm8UA/RVSvK1fMFCTE63s/LS7TbADKZFq3iSLVOsiHCLYPz/6
=cWfn
-----END PGP SIGNATURE-----
More information about the dns-operations
mailing list