3 ms·
I don't have the DHS "emergency directive" (referenced in the article) handy at the moment (and it's been a couple months since I read it) but I don't recall AN
by jlgaddis 8y ago
I don't have the DHS "emergency directive" (referenced in the article) handy at the moment (and it's been a couple months since I read it) but I don't recall ANY recommendation (or "directive") by DHS for the government agencies to implement DNSSEC.
In fact, if memory serves, DNSSEC was not mentioned AT ALL in the DHS document.
That's somewhat telling, IMO.
I'm not sure what ICANN's motivations are in pushing DNSSEC so hard -- all of these "hijackings" were due to compromised accounts (at DNS providers, registrars, etc.).
Instead of requiring government agencies to implement DNSSEEC, DHS instead directed them to rotate/secure their accounts/passwords at the DNS providers, registrars, etc.
That makes much more sense to me.