Australia takes a step towards secure internet

 

Antiquated domain name system to get DNSSEC security renovation.

Australia has started down the long road to a safer internet, as the domain name regulator kicked off a plan today to secure online communications at their bedrock.

Next month, regulator auDA (the .au Domain Administration) and its wholesale domain name provider AusRegistry will phase in the Domain Name Security (DNSSEC) protocol across Australian domain names such as those ending in com.au and net.au.

The regulator said the five-stage process will gradually bring domain name owners into the fold as it tests systems over coming months, before rolling out the technology to the mass market.

DNSSEC helps computers on the internet determine if a communication is going to the right place, essential to thwart hackers who trick devices into sending data to compromised or unauthorised locations.

It was designed to work with the domain name system, the internet's phone book, which matches internet protocol numbers such as 192.168.1.1 with easily understood names such as www.mycomputer.com.

"When the internet was first developed, it was designed to be massively scalable, not inherently secure," said regulator chief executive officer Chris Disspain.

"DNSSEC can provide an extra level of security to help ensure that Australian Internet users will be directed to the website or service they expect when they enter a domain name into their browser."

Disspain warned that the security precaution was only as strong as its weakest link.

"It will be most effective once every element between the internet's core infrastructure and the end user is DNSSEC-enabled," he said.

Disspain said the final stage of the plan would require Australia's ISPs and domain name owners, many of whom are big businesses, to accept the scheme even though there were "no immediate commercial incentives" beyond the comfort of more secure online communications.

"It will be up to ISPs, registrars and corporate entities with a significant web presence to extend the reach of DNSSEC to the end user," he said.

The regulator looked to the Australian Government to "play an important role in helping to deliver the message about the importance of DNSSEC for the security of Australia's internet infrastructure", he said.

Copyright © iTnews.com.au . All rights reserved.


Australia takes a step towards secure internet
"Just to put this article into context, the deployment of DNSSEC within .au is about implementing a technology that will help secure the lines of communication between end users and DNS servers ..."
By chrisw
 
 
 
Comments: 5
johnpro2
Aug 12, 2010 2:46 PM
I am constantly getting redirected to suspect sites by Google search links ..have they also been compromised..?

I have noticed this over the last few weeks or so.
Jp
nate.cochrane
Aug 12, 2010 2:56 PM
@jp - you may be the victim of cache poisoning or the Kaminsky Bug. See here:

http://en.wikipedia.org/wiki/Dan_Kaminsky

You may also have a virus that is redirecting you.
funkyg
Aug 12, 2010 3:55 PM
Wow, I thought this had been done already after the reports about 18 months ago that the current system was compromised. I love the way the report hints that this is something we are doing that's new and early, rather than old and late!
nate.cochrane
Aug 12, 2010 5:10 PM
@funkyg such global internet infrastructure changes take a loooong time to put into place. Just ask anyone who has dealt with the IETF, W3C or ICANN processes. The DNS was compromised at its heart as Kaminsky showed and that dated back decades! At least it's progress.

The root level was only deployed last month - so give it time. More at http://www.dnssec.net/projects
chrisw
Aug 12, 2010 6:08 PM
Just to put this article into context, the deployment of DNSSEC within .au is about implementing a technology that will help secure the lines of communication between end users and DNS servers when resolving a Domain Name. This is very different to securing the infrastructure that provides this resolution and associated registration services (i.e. The .au Domain Name Registry). These systems are, and have been, secured appropriately since AusRegistry took over operation in 2002.
Comments have been disabled for this article.
 
 
 
Top Stories
Telstra shifts BigPond email to Windows Live
All data to be migrated to Microsoft cloud.
 
Windows 8: Under the hood
Part One of iTnews' enterprise guide to Windows 8.
 
iTnews on tour: The Executive Summit Series
Join us in Sydney and Melbourne to meet Australia's tech leaders.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Would you be concerned about your business' email data being hosted offshore?

   |   View results
Yes
  87%
 
No
  13%
TOTAL VOTES: 106

Vote