DNSSEC

[Bill]

Article in El Reg, seen referred to on tbb:

Internet users face the risk of losing their internet connections on 5 May when the domain name system switches over to a new, more secure protocol.

IDNet passes the test OK, seems that OpenDNS doesn't. Yet.

[Inkblot]

I was looking at this yesterday, I have an SBS2003 server here and that has problems - not so bad for me as it's my network, I can just point the clients at either OpenDNS (When it's been fixed) or IDNET DNS but I have clients who have servers with modified DNS Zones, that might be more of a problem

[Rik]

Odd, when I run the RIPE test, it says IDNet are not configured. Time to get on the phone...

[Simon]

I get this:

Test results
for resolver: 192.168.1.254

Announced buffer size:
4096 bytes
Measured buffer size:
3839 bytes
EDNS enabled:
yes
DNSSEC enabled:
no

Your resolver does not have DNSSEC enabled.
Note: There will always be a difference between the announced and measured buffer size because of the algorithm used. However this difference should not exceed 300 bytes.
For detailed explanations about these messages see: http://k.root-servers.org/replysizetest

[Rik]

IDNet are aware of this, but say it's an issue to do with router firewalls and the test, and will not impact on the service when DNSSEC is introduced.

[Ted]

I found this on the Open DNS forums.

http://forums.opendns.com/comments.php?DiscussionID=6595&page=1#Item_0

Seems as if it shouldn't be a problem, but worth keeping an eye on.

[Rik]

If the forum goes very quiet on May 5, we all know why.

[Terryphi]

My Thomson TG585 v7 gives a correct result to the test.

[Rik]

Anyone want to buy a few 2700s, cheap?

[Inkblot]

Always been happy with whatever I've used - Belkin, Netgear etc. so have never really followed the 2700 threads but I have just seen a BT supplied router at work - 2700HGV, is this the one people buy from eBay? Looks quite nice for the price people pay! Currently not having problems with my current Belkin but when the time comes I'll definately look at the 2700 if it's still available.

[Rik]

It is, Inky, and for many of us with longer lines, the 2700 has brought higher speeds or greater stability or both.

[Inkblot]

According to Google Maps my exchange is pretty much exactly 1 mile as the crow flies from where I live and my sync speed is currently 11880 so probably no gains to be had for me.

[Rik]

Probably not, but may be worth trying if there's ever one laying around.