[ga] DNS Server Survey Reveals Mixed Security Picture

[jwkckid1@xxxxxxxxxxxxx]

All,

  It appears that others in the security business are
also very concerned about DNS security or the increasing
lack there of.

The word on the latest annual survey of the state of DNS on the Net. 
The survey, commissioned by infrastructure appliance vendor Infoblox, 
found that the use of Windows DNS Server in Internet-facing 
applications has fallen off dramatically as more users act on 
concerns about security. BIND 9, the latest version, gained against 
earlier, less secure versions. But in other dimensions, DNS practices 
showed little improvement from a security point of view. Hardly
anyone is using DNSSEC; and 31% of nameservers allow promiscuous zone
transfers, a number little changed from last year. Here's a video
http://www.techworld.com/video/popupCricketVideo.cfm of an
interview with Infoblox's chief architect Cricket Liu on the state of
DNS.

Other links:
     http://www.techworld.com/networking/news/index.cfm?newsid=10690
     http://dns.measurement-factory.com/surveys/200710.html
     
Regards,

Jeffrey A. Williams
Spokesman for INEGroup LLA. - (Over 277k members/stakeholders strong!)
"Obedience of the law is the greatest freedom" -
   Abraham Lincoln

"Credit should go with the performance of duty and not with what is very
often the accident of glory" - Theodore Roosevelt

"If the probability be called P; the injury, L; and the burden, B; liability
depends upon whether B is less than L multiplied by
P: i.e., whether B is less than PL."
United States v. Carroll Towing  (159 F.2d 169 [2d Cir. 1947]
===============================================================
Updated 1/26/04
ABA member in good standing member ID 01257402 E-Mail jwkckid1@xxxxxxxxxxxxx
Phone: 214-244-4827