DNS servers prove resilient
In the year since last October's high-profile attacks on the Internet's root Domain Name System servers, improvements in load distribution and processing capacity have made the Internet's core addressing system more resilient.
But the lack of security at lower levels of the DNS stack remains worrisome, according to security experts. And progress on a critical security enhancement designed to add data authentication and integrity services to the DNS protocol remains disappointingly slow, they added.
"The state of it all is somewhat uneven," said Paul Mockapetris, inventor of the DNS and chairman of the board at IP address management vendor Nominum Inc. in Redwood City, Calif.
"The root server operators have created more replicated copies of the root servers. So they are certainly less vulnerable to denial-of-service attacks and the like," he said.
[ Read more ]