ICANN Calls for Full DNSSEC Deployment
-
"ICANN Calls for Full DNSSEC Deployment, Promotes Community Collaboration to Protect the Internet"
https://www.icann.org/news/announcement-2019-02-22-enIn 2019 it still takes forcing people to actually adopt things like DNSSEC before it becomes standard everywhere.
All sites behind cloudflare can use it, but it also requires some extra configuration.I would like to see a study of the current DNSSEC resolvers though, as many I have inspected were not configured properly.
Getting the ISPs to update would probably the biggest delays and resistance.Hopefully one day soon I get to moan and winge about another security standard for years before it is finally adopted and already very dated.
-
@Dr-Flay said in ICANN Calls for Full DNSSEC Deployment:
Getting the ISPs to update would probably the biggest delays and resistance.
How True !
-
Also worth noting is the total lack of support by any browser vendors
https://forum.vivaldi.net/topic/34958/dns-validation-man-in-the-middle-protection -