Fault-Tolerant Mesh of Trust Applied to DNS Security

The Domain Name System is critical for the proper operation of applications on the Internet. Unfortunately, the DNS has a number of significant security weaknesses that can result in the compromise of web sites, email messages login sessions. Additionally, these weaknesses have been used as the basis for man-in-themiddle attacks on what are considered secure network protocols. This paper provides a short description of the weaknesses of the current DNS and a description of DNS security extensions that will solve the existing insecurities. Keywords, Domain Name System, DNS, infrastructure, security.

• Type: Conference
• Year: 2003
• Where: DISCEX
• Authors: Wes Griffin, Russ Mundy, Sam Weiler, Dan Massey, Naheed Vora
• Keywords: DISCEX 2003, DNS Security Extensions, Domain Name System, Information Management, Significant Security Weaknesses