[106254] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

RE: Exploit for DNS Cache Poisoning - RELEASED

daemon@ATHENA.MIT.EDU (Tomas L. Byrnes)
Thu Jul 24 19:42:09 2008

Date: Thu, 24 Jul 2008 16:24:05 -0700
In-Reply-To: <g3sktztg4n.fsf@nsa.vix.com>
From: "Tomas L. Byrnes" <tomb@byrneit.net>
To: "Paul Vixie" <vixie@isc.org>, <nanog@merit.edu>
Errors-To: nanog-bounces@nanog.org

The problem is, once the ICANNt root is self-signed, the hope of ever
revoking that dysfunctional mess as authority is gone.

Perhaps the IETF or DoC should sign the root, that way we have a prayer
of wresting control from ICANN, as opposed to paying a tax, in
perpetuity, for registration services to an unaccountable, unelected,
and imperious body?

Some of us don't think the UN/EU/ITU are good models for governance.

IE: Separation of powers. ICANN/IANA is granted (interim) authority to
operate, but some other governing body signs.



> -----Original Message-----
> From: Paul Vixie [mailto:vixie@isc.org]=20
> Sent: Thursday, July 24, 2008 9:13 AM
> To: nanog@merit.edu
> Subject: Re: Exploit for DNS Cache Poisoning - RELEASED
>=20
> jmamodio@gmail.com ("Jorge Amodio") writes:
>=20
> > As I mentioned in another message, perhaps its time to get serious=20
> > about DNSSEC, where are we on this front ?
>=20
> Still waiting for US-DoC to give ICANN/IANA permission to=20
> sign the root zone.
> --
> Paul Vixie
>=20
> --
> This message has been scanned for viruses and dangerous=20
> content by MailScanner, and is believed to be clean.
>=20
>=20
>=20


home help back first fref pref prev next nref lref last post