ICANN announces Deployment of DNSSEC to Internet root server

The Internet name and digital address distribution agency (http://www.aliyun.com/zixun/aggregation/29832.html ">icann") has reached an agreement with the U.S. Department of Commerce and VeriSign. Deploy the domain Name System security Extension (DNSSEC) to the Internet root server. The initiative was announced last week at the Black Hat Convention to strengthen the security of the domain Name System and protect users from certain types of cyber scams. "Cyber criminals can steal your money and your personal data without your knowledge," said Rod Beckstrom, president and chief executive of ICANN, in a press release, "Deploying the Domain Name System security Extension (DNSSEC) to the Internet root server, which would help to disrupt the offender's plans, That is, attempts to exploit key parts of the Internet infrastructure to steal user information. ”

DNSSEC deployment adds public key cryptography to the domain Name system and creates an authentication platform that verifies the validity of Internet addresses and prevents users from redirecting to maliciously crafted fake websites.

By giving users the assurance that they arrive at the site they want to visit, DNSSEC will guard against cache poisoning and intermediate attacks that attempt to break the trust relationship between users and domains.

Cache poisoning occurs when an Internet address in the server's DNS table is replaced by a malicious address. An attacker can also use a man-in-the-middle attack to interfere with public key exchange, intercept information, and then transmit it; The attacker secretly replaces his or her public key with the key that the user requested, but makes the original communication appear intact. Criminals use this technology to transfer their customers ' online communications to a bank, then pretend to be customers, and use that information to steal the victim's bank account.