Re:ICANN urges adopting DNSSEC now
by jlgaddis on Saturday April 20, 2019 @03:28PM
(#19708419)
I don't have the DHS "emergency directive" (referenced in the article) handy at the moment (and it's been a couple months since I read it) but I don't recall ANY recommendation (or "directive") by DHS for the government agencies to implement DNSSEC.
In fact, if memory serves, DNSSEC was not mentioned AT ALL in the DHS document.
That's somewhat telling, IMO.
I'm not sure what ICANN's motivations are in pushing DNSSEC so hard -- all of these "hijackings" were due to compromised accounts (at DNS providers, registrars, etc.).
Instead of requiring government agencies to implement DNSSEEC, DHS instead directed them to rotate/secure their accounts/passwords at the DNS providers, registrars, etc.
In fact, if memory serves, DNSSEC was not mentioned AT ALL in the DHS document.
That's somewhat telling, IMO.
I'm not sure what ICANN's motivations are in pushing DNSSEC so hard -- all of these "hijackings" were due to compromised accounts (at DNS providers, registrars, etc.).
Instead of requiring government agencies to implement DNSSEEC, DHS instead directed them to rotate/secure their accounts/passwords at the DNS providers, registrars, etc.
That makes much more sense to me.