- Impact
- 364
.:: Public Interest Registry ::.
.ORG, The Public Interest Registry is dedicated to the security and stability of the internet. In our effort to bolster Internet security, we are implementing Domain Name System Security Extensions (DNSSEC) within the .ORG Top Level Domain. DNSSEC is designed to protect Internet servers from domain name system attacks, such as DNS cache poisoning by malicious users. It is a set of DNS extensions which provide 3 basic functions:
* Data Origin Authentication - assures that data is received from the authorized DNS server; can protect from impersonation attacks
* Data Integrity - assures that data received matches data on the origin DNS server, and is not modified during transit; protects from man-in-the-middle type pollution attacks.
* Authenticated Denial of Existence - assures that a "Non-existent" response is valid.
In June 2008, the PIR proposal to implement DNSSEC within the .ORG zone was unanimously approved by the board of Internet Corporation for Assigned Names and Numbers (ICANN) after a thorough review by ICANN's Security and Stability Committee. As the first open generic Top Level Domain authorized to implement DNSSEC, .ORG launched a cross industry coalition to execute an industry wide education and adoption plan within the Internet infrastructure community.
Believing this issue to be critical in the overall security and longevity of the Internet, .ORG plays a strategic role in efforts to understand and mitigate these implementation challenges, including active participation in ongoing DNSSEC design and deployment initiatives as well as offering an experimental DNSSEC Testbed for registrars.
Sign up here to get more information on our DNSSEC efforts and implementation.
.ORG, The Public Interest Registry is dedicated to the security and stability of the internet. In our effort to bolster Internet security, we are implementing Domain Name System Security Extensions (DNSSEC) within the .ORG Top Level Domain. DNSSEC is designed to protect Internet servers from domain name system attacks, such as DNS cache poisoning by malicious users. It is a set of DNS extensions which provide 3 basic functions:
* Data Origin Authentication - assures that data is received from the authorized DNS server; can protect from impersonation attacks
* Data Integrity - assures that data received matches data on the origin DNS server, and is not modified during transit; protects from man-in-the-middle type pollution attacks.
* Authenticated Denial of Existence - assures that a "Non-existent" response is valid.
In June 2008, the PIR proposal to implement DNSSEC within the .ORG zone was unanimously approved by the board of Internet Corporation for Assigned Names and Numbers (ICANN) after a thorough review by ICANN's Security and Stability Committee. As the first open generic Top Level Domain authorized to implement DNSSEC, .ORG launched a cross industry coalition to execute an industry wide education and adoption plan within the Internet infrastructure community.
Believing this issue to be critical in the overall security and longevity of the Internet, .ORG plays a strategic role in efforts to understand and mitigate these implementation challenges, including active participation in ongoing DNSSEC design and deployment initiatives as well as offering an experimental DNSSEC Testbed for registrars.
Sign up here to get more information on our DNSSEC efforts and implementation.
