danyork

34 ms·

301.
The Shellshock Bug in About Four Minutes(youtube.com)
3 points by danyork 12y ago|0 comments
302.
BlackBerry's New Blend Application Requires IPv6 Networking(internetsociety.org)
2 points by danyork 12y ago|0 comments
303.
by danyork 12y ago
Good read... until reading this article, I didn't fully understand how some of these additions to iOS 8 under the hood could make working on an iPad more effective.
304.
by danyork 12y ago
> I note that you don't run DNSSEC yourself. Actually, I do run DNSSEC on most of my domains, but for that particular one, danyork.com, I unfortunately lost DNSSEC support when I needed to switch the name servers to CloudFlare to
305.
by danyork 12y ago
Meanwhile, 85% of .GOV domains are DNSSEC-signed as are 34% of .NL domains and 18% of .BR. The improved security of DNS via DNSSEC is happening... it's just unevenly distributed.
306.
by danyork 12y ago
The step to go beyond that, of course, would be to use DANE with the SMTP connections so that the entire mail exchange could happen over TLS and using certs that have been validated via DNSSEC/DANE. But first step is to get the MX rec
307.
by danyork 12y ago
The good news is that we're seeing an increased deployment of DNSSEC-validating DNS resolvers - now about 12% of all DNS queries per APNIC stats - http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=1&r=1&
308.
by danyork 12y ago
There is a longer discussion of this post in another HN submission: https://news.ycombinator.com/item?id=8304756
309.
IndieWeb advocates launch Known so bloggers can control their content(gigaom.com)
3 points by danyork 12y ago|0 comments
310.
Known for developers (new web publishing platform)(withknown.com)
3 points by danyork 12y ago|0 comments
311.
US DoD’s DREN Will Only Buy Products with an IPv6 Website(internetsociety.org)
2 points by danyork 12y ago|0 comments
312.
by danyork 12y ago
Good to see someone documenting a situation where DNSSEC would help if: 1) the mail servers were performing DNSSEC validation (as postfix now does); and 2) the DNS zones were signed that included the MX records.
313.
How Do We Define 'SIP' for Telecom in 2014?(disruptivetelephony.com)
1 points by danyork 12y ago|0 comments
314.
LinkedIn Joins Facebook and Google in Permanently Enabling IPv6(internetsociety.org)
2 points by danyork 12y ago|0 comments
315.
Permanent launch of IPv6 at LinkedIn(engineering.linkedin.com)
4 points by danyork 12y ago|3 comments
316.
Vultr Offers SSD VPS' with IPv6 Connectivity(vultr.com)
1 points by danyork 12y ago|1 comments
317.
BGP Hijacker Steals Bitcoins(internetsociety.org)
1 points by danyork 12y ago|0 comments
318.
Why Is Skype Forcing A Software Upgrade On All Of Us?(disruptivetelephony.com)
2 points by danyork 12y ago|0 comments
319.
InfoWorld: Why you need to deploy DNSSec now(infoworld.com)
3 points by danyork 12y ago|0 comments
320.
Techquickie video: IPv4 vs. IPv6 as Fast As Possible(youtube.com)
1 points by danyork 12y ago|0 comments
321.
by danyork 12y ago
If you want to completely build your own DNS resolver, or integrate that functionality into an app, I would recommend looking at the new getDNS API: http://getdnsapi.net/ also on Github at: https://github.com&#
322.
by danyork 12y ago
A great place to start would be to install Unbound - a great resolving caching server from NLNet Labs: http://unbound.net/ They also have a version focused on providing DNSSEC validation called "DNSSEC-Trigger":
323.
by danyork 12y ago
> If you're a user, you can't use bit.ly services with DNSSEC without trusting the .ly TLD, right ? True, although you can remove the "with DNSSEC" part. You can't use bit.ly (or any other .ly) without trusting
324.
by danyork 12y ago
I was not playing a game. I was honestly trying to understand because it didn't make any sense to me. I don't see the actual root of DNS being able to do much at all. If the root tried to give altered NS records for one of the TL
325.
by danyork 12y ago
Ah, gotcha. Sure, the .COM registry could return NS records for example.com pointing to a controlled name server that could then return an A record pointing to a controlled web server that wasn't mine. And those false NS records could
326.
by danyork 12y ago
Thanks for writing that response. I certainly agree DNSSEC could be improved (which is a large part of why I'm at IETF90 in Toronto this week). On whether DNSSEC makes the Internet more or less secure, I think you and I will just have
327.
by danyork 12y ago
> DNSSEC is a hierarchical PKI, like the CA system. Just off the root of the DNSSEC hierarchical PKI are a series of branches that are controlled entirely by world governments. I am assuming you are talking about the country-code TLDs (c
328.
by danyork 12y ago
Maybe it's just that I'm deliriously tired, but I'm still missing how "the DNS root" can alter the data in MY zone sitting on my little authoritative server somewhere. Can you please walk me through the actual atta
329.
by danyork 12y ago
Ah, so you don't like that DNS resolvers just return a regular SERVFAIL when DNSSEC validation fails, without some kind of indication as to why the failure occurred. I agree. I wish a failure of DNSSEC validation returned a different
330.
by danyork 12y ago
(smiling) You already know the answer - "it depends". What websites were they visiting? If they were going to a lot in .SE, then they might have had a good bit of DNSSEC validation happening. If they were going to .COM websites

More ›