nanog mailing list archives
Re: Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS)
From: Timothy Morizot <tmorizot () gmail com>
Date: Thu, 20 Jun 2013 19:44:30 -0500
On Jun 20, 2013 7:30 PM, "Rubens Kuhl" <rubensk () gmail com> wrote:
In this case of registrar compromise, DS record could have been changed alongside NS records, so DNSSEC would only have been a early warning, because uncoordinated DS change disrupts service. As soon as previous timeouts played out, new DS/NS pairs would be considered as trustworthy as the old ones.
Since DS records typically have a ttl of 24 hours, that protection should not be underestimated even in the case of registrar compromise. However, everything released so far indicates this was a netsol error and not a compromise. And it was an error corrected fairly quickly from what I can tell. The impact was prolonged because the bad nameservers were cached in resolvers across the Internet. Of course, very few details have actually been released, so that construction could be wrong. But even in the worst case DNSSEC would have provided some mitigation for a time.
Current thread:
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS), (continued)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Randy Bush (Jun 20)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Bryan Irvine (Jun 20)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Ryan - Lists (Jun 20)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Richard Golodner (Jun 20)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Randy Bush (Jun 20)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) George Herbert (Jun 20)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Phil Fagan (Jun 20)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Fred Reimer (Jun 20)
- Message not available
- Fwd: Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Timothy Morizot (Jun 20)
- Re: Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Rubens Kuhl (Jun 20)
- Re: Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Timothy Morizot (Jun 20)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Jimmy Hess (Jun 20)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Hank Nussbacher (Jun 20)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Hank Nussbacher (Jun 20)
- RE: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Kain, Rebecca (.) (Jun 21)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Jimmy Hess (Jun 21)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Barry Shein (Jun 21)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) jamie rishaw (Jun 22)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Nicolai (Jun 21)
- RE: This is a coordinated hacking. (Was Re: Need help in flushing DNS) Frank Bulk (Jun 21)
- Re: This is a coordinated hacking. (Was Re: Need help in flushing DNS) John Levine (Jun 21)