[dns-operations] Github Down cause of DNS (dyne) problem ?

Paul Ferguson fergie at people.ops-trust.net
Sat Oct 22 01:35:12 UTC 2016

Hash: SHA256

Don't let the perfect be the enemy of the good.

BCP38 is still STRONGLY encouraged globally.


- - ferg (BCP38 instigator)

On 10/21/2016 6:13 PM, David Conrad wrote:

> Viktor,
> On October 21, 2016 at 11:01:46 AM, Viktor Dukhovni 
> (ietf-dane at dukhovni.org <mailto:ietf-dane at dukhovni.org>) wrote:
>> Given the scale of recent attacks, perhaps the time has come for 
>> responsible networks to announce dates by which peering will
>> cease with parties that ignore BCP 38.
> Initial reports suggest this attack is at least partially
> Mirai-based, thus BCP38 probably won't help.  That isn't to say we
> shouldn't push for BCP38, but it isn't a silver bullet.
> I believe the real issue is that the vulnerabilities on the
> Internet are multifaceted and (in my opinion) highlight a
> fundamental architectural issue: end-to-end assumes all the brains
> are at the edges, however brains attract zombies and we've got
> tissue paper walls protecting us. Without vastly improved security,
> Internet of Things will become Internet of Zombies and I've long
> believed that it will simply not be possible for infrastructure
> providers, critical or not, to be able to scale their capacity to
> keep up.
> So, sure, BCP38 is a great idea and everyone should do it, but it
> isn't going to solve the problem.
> Regards, -drc (ICANN CTO, but speaking only for myself)
> _______________________________________________ dns-operations
> mailing list dns-operations at lists.dns-oarc.net 
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations 
> dns-operations mailing list 
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

- -- 
Paul Ferguson
ICEBRG.io, Seattle USA
Version: GnuPG v2


More information about the dns-operations mailing list