VeriSign expects major security update by 2011

VeriSign, which runs the master database for such domains as .com and .net, says a significant Internet security vulnerability will be closed by 2011, after delays caused by technical aspects of the implementation.

The problem is that DNS, the Domain Name System that translates Internet addresses into numerical values, can be seeded with false values and used to misdirect users. VeriSign told ZDNet on Friday that it will put in place DNSSEC, a protocol that will guarantee the origin and integrity of DNS data for the .com and .net domains, by the first quarter of 2011.

Read more of "VeriSign: Major internet security update by 2011" at ZDNet UK.

[n3td3v]

Two years to patch a security vulnerability... too long in my opinion.

[kaibelf]

Did you propose a solution that would have addressed the technical issues, downtime, and security simultaneously, or are you just meaninglessly complaining?

[c60chemist]

I have heard that DNSSEC breaks TCP. Is this true ?

[Lerianis3]

I'm more worried about "Will old equipment support this new standard?" If I have to go out and buy new routers, wireless cards, etc. to use this stuff..... forget it, I'll stick with regular old DNS.

[fgwgner]

And how about how much it cost to use this new protocal VeriSign does nothing for free