DNS Server Survey Reveals Mixed Security Picture

Kurtz'sKompund writes in with word on the latest annual survey of the state of DNS on the Net. The survey, commissioned by infrastructure appliance vendor Infoblox, found that the use of Windows DNS Server in Internet-facing applications has fallen off dramatically as more users act on concerns about security. BIND 9, the latest version, gained against earlier, less secure versions. But in other dimensions, DNS practices showed little improvement from a security point of view. Hardly anyone is using DNSSEC; and 31% of nameservers allow promiscuous zone transfers, a number little changed from last year. Here's a video of an interview with Infoblox's chief architect Cricket Liu on the state of DNS.

Comments

Re:Security? It's quite simple

[ArsenneLupin]

1) Put BIND in jail. What crime does it have committed?

Re:Security? It's quite simple

[Anonymous Coward]

I think you missed the part about zone transfers and lack of DNSSEC, although I can see how you would only do the bare minimum to maximize 4) profit.

Re:Security? It's quite simple

[tttonyyy]

1) Put BIND in jail. What crime does it have committed? I called it a name and it went all IPv6 on me.