Educause Announces Plans To Sign .edu TLD With DNSSEC 49
jhutkd writes "Educause (who run the .edu gTLD) announced today that they will deploy DNSSEC and sign the .edu zone by the end of March 2010.
This will enable all educational institutions to benefit from deploying DNSSEC via the secure delegation hierarchy starting with IANA's ITAR (a temporary surrogate for the root zone signing), going through .edu, down to schools, and potentially leading all the way down to individual departments. Unlike larger gTLDs like .org, the churn of adding new and deleting old zones in .edu is much lower (due to the fact that there are tight controls on who may register for a delegation). Thus, many of the hassles of adding new DS records and maintenance procedures might be more manageable and help speed DNSSEC's rollout in this branch of the DNS hierarchy."
Administratium (Score:4, Insightful)
Unlike larger gTLDs like .org, the churn of adding new and deleting old zones in .edu is much lower (due to the fact that there are tight controls on who may register for a delegation). Thus, many of the hassles of adding new DS records and maintenance procedures might be more manageable and help speed DNSSEC's rollout in this branch of the DNS hierarchy.
Right. It's the administrative costs that are keeping it from being deployed. Sex.com sold for $14 million. I'd be willing to guess that the namespace of domains worth > $1,000 is totals several hundred million. Right now, the security to protect the aforementioned virtual properties is like a vault with a screen door out the back. It's a source of great internal amusement to me that in the real world our schools have some of the worst physical security, but soon they'll have some of the best digital security.
.bnk? (Score:4, Insightful)
Can't they just use DNSSEC for banks (optionally give a tld for anything financial)
Re:.bnk? (Score:2, Insightful)
How little people actually care ... (Score:4, Insightful)
This is offtopic, but important.
Look at how few people comment on this article, which is a very important step forward for the Internet, yet there are 3 to 4 times more comments on the article about running Linux on a Kindle.
Since Slashdot is basically a representation of the OSS and technical worlds view on things, its very sad that people who are supposed to be intelligent, thoughtful creatures get excited over something as pointless as running Linux on Kindle, but care so little about something that is important to the Internet as a whole.
I realize that most people here are Linux fanboys (and this is one time I'm not saying it to be insulting, I'm a FreeBSD fanboy for instance, its okay as long as you are rational about it) so that means Linux related topics are going to get more coverage here, but ... 3 to 4 times more people care about running Linux on a device like the Kindle than DNSSEC for a TLD ... thats just freaking sad to me :(