danyork

24 ms·

211.
Apple Will Require IPv6 Support for All iOS 9 Apps(internetsociety.org)
9 points by danyork 11y ago|0 comments
212.
IPv6 in Finland – finally(internetsociety.org)
1 points by danyork 11y ago|0 comments
213.
Global routing – a kludge or a collaboration phenomenon?(internetsociety.org)
1 points by danyork 11y ago|0 comments
214.
Bringing Nepal Back Online: Free WiFi to Bhimeshwar(internetsociety.org)
1 points by danyork 11y ago|0 comments
215.
by danyork 11y ago
Right... at this point Facebook is where the people are that other people want to communicate with. Facebook has the massive "directory" of users. Social networks are only useful to people if the other people with whom they w
216.
by danyork 11y ago
And yes, please do flesh out that post sometime... I would be interested in reading it! :-)
217.
by danyork 11y ago
Also we have to consider that "regular" Internet users (who are probably not HN readers!) just want to communicate with their friends, share pictures and jokes, find news, etc. They want a simple user experience that's jus
218.
Bringing Nepal Back Online: Solar Trip(internetsociety.org)
1 points by danyork 11y ago|0 comments
219.
Encryption Backdoors Decrease Trust in the Internet(internetsociety.org)
1 points by danyork 11y ago|0 comments
220.
Verizon Wireless Nears 70% IPv6, AT&T Crosses 50%, More…(internetsociety.org)
1 points by danyork 11y ago|0 comments
221.
NewsFactor: US Supply of IPv4 Addresses to Run Out Soon(newsfactor.com)
2 points by danyork 11y ago|0 comments
222.
Internet.nl – A Way to Check IPv6, DNSSEC, TLS(en.internet.nl)
2 points by danyork 11y ago|0 comments
223.
by danyork 11y ago
Try http://en.internet.nl/ as a way to find whether your sites or ISPs use IPv6
224.
AT&T breaks through 50% IPv6, Saudi Arabia join top 20 IPv6 nations(worldipv6launch.org)
2 points by danyork 11y ago|0 comments
225.
Watch Live Today – 2nd Annual InterPlanetary Networking Conference(internetsociety.org)
1 points by danyork 11y ago|0 comments
226.
Internet.nl – A New Site to Easily Test Your Use of IPv6, DNSSEC, TLS and DKIM(circleid.com)
1 points by danyork 11y ago|0 comments
227.
Measure Your Bufferbloat - New Browser-Based Tool from DSLReports(internetsociety.org)
2 points by danyork 11y ago|0 comments
228.
Facebook News Feeds Load 20-40% Faster Over IPv6(internetsociety.org)
1 points by danyork 11y ago|0 comments
229.
Internet Security vs. Quantum Computing(ietf.org)
10 points by danyork 12y ago|0 comments
230.
Can a Machine Care About Privacy?(internetsociety.org)
1 points by danyork 12y ago|0 comments
231.
by danyork 12y ago
I agree that signatures are of no value unless validation is done... but please do note that current measurements are showing about 13% of all DNS queries globally are in fact being validated: http://stats.labs.apnic.net/dns
232.
by danyork 12y ago
> It's not controlled by NSA? The largest nodes in the tree are literally controlled by them. Perhaps I should thank you, Thomas, for continuing to beat this drum... because it shows extremely clearly how we need to educate more pe
233.
by danyork 12y ago
> The CA mechanism used for TLS has the same issue. It's not just theoretical either... Exactly. Which is why so many of us are looking for ways to add an additional layer of trust to the CA system used for TLS. One such mechanism
234.
by danyork 12y ago
Let's be clear, though, the root of DNSSEC is NOT handled like the root of any CA system. The process of obtaining the root private key is not something where you just break into some system and grab a file somewhere. The root
235.
by danyork 12y ago
But here's the thing - the root zone's private key for DNSSEC is not in one place. It is spread across a number of smart cards carried by a variety of individuals spread around the world - specifically so that it could not be c
236.
by danyork 12y ago
colmmacc - I was thinking more of a case where the attacker is doing a MITM on your DNS info, i.e. getting between you and the DNS server authoritative for the domain you want to connect to in order to redirect you to another site. My use o
237.
by danyork 12y ago
> jocluteseh: Can DNSSEC be re-directed to incorrect public keys? Sure. Please explain how. The whole point of DNSSEC is to provide a cryptographic validation that the material put into DNS by the operator of a zone is the same informat
238.
by danyork 12y ago
tptacek: > I don't understand the point you're trying to make. I am trying to understand how the attack you say is possible truly is possible. > In this case, you're talking about a zone (COM) the USG explicitly contr
239.
by danyork 12y ago
If your Internet-enabled device doesn't have a DNSSEC-validating resolver (with solid trust anchors for the root zone), then this entire conversation is irrelevant. If your Internet-enable device does have a DNSSEC-validating resolve
240.
by danyork 12y ago
Thomas, I perform DNSSEC validation on the edge of my home office network. All my devices use my DNSSEC-validating DNS resolver on my network server-gateway. That resolver is going to check the DNSSEC chain of trust using DS records all the

More ›