News for hackers. Stuff that matters.

A comment on Thousands of Russians protest against internet restrictions. Parent comment

Re:Thousands of Russians protest against internet restrictions by egao1980 on Sunday March 10, 2019 @04:17PM (#19354150)
Nope, it's not radical. DNS system is controlled by US company and if you rely on it your country's infrastructure is vulnerable. So if US decides to cut Russia from DNS national services including government sites should continue to function.

People panic without understanding the reasons behind this law.

[ Parent | on HN ]
Re:Thousands of Russians protest against internet restrictions by comboy on Sunday March 10, 2019 @04:32PM (#19354252)
I would understand if you were talking about certificates, but DNS? It should not be trusted by default.
[ Parent | on HN ]
Re:Thousands of Russians protest against internet restrictions by liberte82 on Monday March 11, 2019 @04:31PM (#19362529)
Could you end up with competing DNS services in different nations that direct users to different IPs? Now that could be a mess.
[ Parent | on HN ]
Re:Thousands of Russians protest against internet restrictions by jamespo on Sunday March 10, 2019 @07:01PM (#19355302)
Doesn't Russia operate the authoritative servers for .ru ?
[ Parent | on HN ]
Re:Thousands of Russians protest against internet restrictions by rzerda on Sunday March 10, 2019 @10:14PM (#19356186)
TLD servers are useless without root ones. There are several replicas of K-root in Russia, but they are under control of RIPE (EU organization).
[ Parent | on HN ]
Re:Thousands of Russians protest against internet restrictions by jamespo on Tuesday March 12, 2019 @12:31PM (#19369949)
How are they useless in terms of "if US decides to cut Russia from DNS national services including government sites should continue to function"

What TLD are these sites hosted on?

[ Parent | on HN ]
Re:Thousands of Russians protest against internet restrictions by rzerda on Tuesday March 12, 2019 @01:41PM (#19370851)
TLD servers for .ru zone can answer questions like “who should I ask where kremlin.ru is?”, but before that there is a question “where .ru zone DNS servers are”, and that’s what root servers are supposed to answer. If - hypothetically - all root servers will answer “oh, .ru zone is served by that guy in Washington DC”, no DNS resolver would ask “real” .ru servers because list of root servers is effectively hard coded and changing it on all clients is a lot of work.
[ Parent | on HN ]