Olaf M. Kolkman wrote:DNSSEC was designed to deal with cache poisoning and a set of other DNS vulnerabilities such as "man in the middle" attacks and data modification in authoritative servers. Its major objective is to provide the ability to validate the authenticity and integrity of DNS messages in such a way that tampering with the DNS information anywhere in the DNS system can be detected. This is the kind of protection that DNS desperately needs.
[DNS] Comcast Completes DNSSEC Deployment is the thread at dslreports.com where I saw about this and NetFixer's post in that thread is where I hear about Steve Gibson's Domain Name Speed Benchmark. I had already tried namebench and set static dns in my Linksys with those results.
Code: Select all
Try out namebench. It hunts down the fastest DNS servers available for your
computer to use. namebench runs a fair and thorough benchmark using your web
browser history, tcpdump output, or standardized datasets in order to
provide an individualized recommendation. namebench is completely free and
does not modify your system in any way. This project began as a 20% project
at Google.
I wanted to try Gibson's "machine language" artistry but it's an exe, which is where this becomes a post about Linux. I happen to have the Oracle VirtualBox installed and have mastered that sufficiently to have added a "network drive", where I can easily put downloads or other files while running Mandriva, then use them once XP in VB is fired up. (I'm impressed with how polished Oracle's VB is and use it monthly for a "Go To Meeting" event that is windows-only software. ) So, I put the ~167kb file over there, started my XP machine, and...
Judging from that, I set up the static dns settings in the Tomato firmware...