NNSquad - Network Neutrality Squad
[ NNSquad ] DNS + DANE = Dumb, Dumber, Disaster (How to wreck secure communications)
DNS + DANE = Dumb, Dumber, Disaster (How to wreck secure communications) http://j.mp/kMtruP (This message on Google Buzz) - - - In response to my posting earlier today regarding the limitations of DNSSEC, several people asked for my thoughts on a proposed extension to DNS called "DANE" (that effectively has DNSSEC as a prerequisite). The idea of DANE is to use a "secure" DNSSEC environment to exchange the digital certificates required for secure host-to-host communications (that enable what is commonly called "SSL/TLS/https:" data transfers). Oh yeah, DANE is just a, uh, "dandy" idea - IF your goals are the following: 1) Make virtually all common Internet secure communications dependent on the structurally obsolete DNS/DNSSEC model, thereby further entrenching the domain-industrial complex and the enrichment of its minions, by giving even *more* power to ICANN, registrars, and registries, etc. 2) Assure that the world's secure communications infrastructure (PKI) is easily and directly vulnerable to the same sorts of government overreaching and abuses that have characterized U.S. takedowns of domains around the world, including vast numbers of innocent domains, usually without significant due process, consultation, or adherence to the rights of either domestic or international domain owners. So yes, if you enjoy watching the shenanigans of the current "DNS Mafia" and government malfeasance directed at the Domain Name System both domestically and internationally, and you want to see them have even *more* money and power, you're gonna just *love* DANE. Sign up now. Don't forget the cyanide-laced Kool-Aid for later. --Lauren-- Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren Co-Founder: People For Internet Responsibility: http://www.pfir.org Founder: - Network Neutrality Squad: http://www.nnsquad.org - Global Coalition for Transparent Internet Performance: http://www.gctip.org - PRIVACY Forum: http://www.vortex.com Member: ACM Committee on Computers and Public Policy Blog: http://lauren.vortex.com Twitter: https://twitter.com/laurenweinstein Google Buzz: http://j.mp/laurenbuzz Tel: +1 (818) 225-2800 / Skype: vortex.com