Posted on 10/12/2018 6:17:53 AM PDT by Reno89519
ICANN has scheduled the Root Zone Key Signing Key (KSK) Rollover for today, and it could affect some DNS users all over the world. [What that means is potentially no internet for lots of people!]
By Rolling the KSK, ICANN implies that a new cryptographic public and private key pair will be generated and the private key will be distributed to internet service providers, enterprise network administrators, and Domain Name System (DNS) resolver operators.
KSK Rollover operations began in October 2016 and were scheduled for October 2017. However, ICANN announced that the rollover has been postponed due to the fact that a significant number of resolvers used by Internet Service Providers (ISPs) and Network Operators are not yet ready for the Key Rollover.
A draft plan was announced on February 1, 2018, after receiving input from the community; October 11, 2018, was the date put forward to initiate the procedure. According to ICANN, the rollover is necessary to curb the rising number of cyber attacks.
In an official statement, Communications Regulatory Authority said: To further clarify, some internet users might be affected if their network operators or Internet Service Providers (ISPs) have not prepared for this change. However, this impact can be avoided by enabling the appropriate system security extensions.
Due to the ongoing maintenance work, some internet users could face issues in accessing web pages or making transactions over the next 48 hours.
Mine is "PASSWORD"
Ive had a lot of worries in my life, most of which never happened.- Mark Twain
Yes, the amount of time we can spend, is rather sobering. Leaves you to wonder what were missing in life day-to-day.
Damn you all to Hell, Obama! Hand control of our internet over to the world, and what do they do? Shut it down for two days! If we’re so lucky; could be two weeks as far as we know.
Ping me when the internet goes down
I’m “seasoned” enough to remember the Y2K (year 2000) saga, when the world was convinced all of everything would stop, because computer programs wouldn’t be able to handle the change from 1999 to 2000.
I was in a tech company at the time, and I remember the countless hours and untold sums that were spent ensuring our programs would work when the page flipped to January 1, 2000. Big insurance companies and banks that were, and still largely are dependent on mainframe computers running COBOL programs developed in the 70’s and 80’s had to recall old employees, as no one on-staff at the time knew anything about the code.
A client asked me in 1999 what was the best-case scenario for us and our work. I replied that if all went as planned, no one would notice. (...and then some non-tech finance guy in the C-suite would berate the CTO for crying wolf and wasting money on unnecessary projects!)
“One ping only.”
Yes, 1999 was one of my best years as a consultant. Lots of hours and money. All for an oops. I don’t think anyone ended up being affected, not sure the impact had folks not prepared.
At least the roads will be safer to drive on.
OpenDNS: 208.67.222.222 and 208.67.220.220
Verisign: 64.6.64.6 and 64.6.65.6
I don't recommend Google Public DNS (given Google's political issues!) or Cloudflare DNS (the 1.1.1.1 DNS addreess interferes with some network hardware).
Mine is "QWERTY" :D
Sure opened my eyes.
(opened my wife’s eyes as well, mostly when she saw a couple of new .22 rifles, a .45-70, and about 5k rounds of ammo come home with me this week too...)
Yet until something better comes along, DNSSEC is the current best tool (regardless of how much it sucks) that we have for preventing DNS attacks.
Append keyword "q" |
reasonisfaith |
10/12/2018 8:03:38 AM PDT |
Append keyword "qanon" |
reasonisfaith |
10/12/2018 8:03:26 AM PDT |
Knock it off! |
Patriot series by John Wesley Rawles.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.