NordVPN Promotion

Home / Industry

Verisign Achieves Critical DNSSEC Milestone by Deploying Security Extensions in .com TLD

Verisign, Inc. announced today that .com—the Internet’s largest domain with more than 90 million domain name registrations worldwide—now supports DNS Security Extensions (DNSSEC).

Deploying DNSSEC in the .com domain signals that Verisign has achieved a critical milestone in improving the integrity of Internet communications and the security of Domain Name System (DNS) transactions. This achievement comes after years of close and careful collaboration between Verisign, the Internet Corporation for Assigned Names and Numbers (ICANN) and a variety of Internet stakeholders, from registrars and Internet Service Providers (ISPs) to hardware and software vendors.

“By reaching this critical milestone in DNSSEC deployment, Verisign and the Internet community have made enormous strides in protecting the integrity of DNS data,” said Pat Kane, senior vice president and general manager of Naming Services at Verisign. “But the threats against the Internet ecosystem—whether targeting the DNS or elsewhere—are unrelenting. That’s why Verisign continually invests to ensure the security and availability of the Internet infrastructure.”

DNSSEC helps close a known vulnerability within the DNS that has increasingly become a target for hackers and identity thieves. The security extensions apply digital signatures to DNS data to authenticate the data’s origin and verify its integrity as it moves throughout the Internet. The extensions are designed to protect the DNS from man-in-the-middle attacks that corrupt DNS data stored on recursive name servers. With DNSSEC, poisoning a recursive name server’s cache is much more difficult because DNS administrators sign their data. The resulting digital signatures on that DNS data are validated through a “chain of trust.”

Gartner Research Director Lawrence Orans added, “The importance of DNSSEC in solving issues of trust on the Internet has reached a tipping point with the signing of .com—one of the most significant milestones in the history of DNSSEC to date. However, there is still more work to be done and the effective deployment of DNSSEC requires collaboration from all parties in the Internet ecosystem.”

The deployment of DNSSEC in .com follows Verisign’s successful 2010 DNSSEC roll-out in .net in December, .edu in August and the collaborative effort between Verisign, ICANN and the U.S. Department of Commerce to sign the DNS root zone in July. To support and encourage DNSSEC implementation, Verisign also operates a DNSSEC Interoperability Lab. Staffed by Verisign personnel, the lab helps solution providers, ISPs and others ensure the Internet communications ecosystem is ready for DNSSEC.

Verisign provides the registrar community with a variety of tools to reduce the cost and complexity associated with implementing DNSSEC. To assist in driving adoption, the DNSSEC Signing Service is being offered to registrars to help them incorporate signing and provisioning into their infrastructure, while reducing the administrative burden of providing DNSSEC support for their customers. In addition, the Verisign DNSSEC Analyzer is an iPhone application that can assist in diagnosing problems with DNSSEC-signed names and zones. The Verisign Network Intelligence and Availability (NIA) group is also helping domain owners ease the complex management necessary to operate a signed zone by integrating DNSSEC support into its unrivalled Managed DNS service.

Verisign’s DNSSEC efforts dovetail with the company’s “Project Apollo” initiative, which will dramatically strengthen and scale the .com infrastructure by the year 2020. To achieve this, Verisign is scaling, and in some cases revamping, the infrastructure that keeps .com running. Verisign’s 2020 technology roadmap calls for it to increase capacity 1,000 times today’s level of 4 trillion queries to manage 4 quadrillion queries per day. The increased capacity will support normal and peak attack volumes based on what the company has experienced as well as Internet attack trends.

NORDVPN DISCOUNT - CircleID x NordVPN
Get NordVPN  [74% +3 extra months, from $2.99/month]
By Verisign, A Global Provider of Critical Internet Infrastructure and Domain Name Registry Services

Verisign, a global provider of domain name registry services and internet infrastructure, enables internet navigation for many of the world’s most recognized domain names. Verisign enables the security, stability, and resiliency of key internet infrastructure and services, including providing root zone maintainer services, operating two of the 13 global internet root servers, and providing registration services and authoritative resolution for the .com and .net top-level domains, which support the majority of global e-commerce. To learn more about what it means to be Powered by Verisign, please visit Verisign.com.

Visit Page

Filed Under

Comments

Commenting is not available in this channel entry.
CircleID Newsletter The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

Related

Topics

Cybersecurity

Sponsored byVerisign

IPv4 Markets

Sponsored byIPv4.Global

Threat Intelligence

Sponsored byWhoisXML API

Domain Names

Sponsored byVerisign

New TLDs

Sponsored byRadix

Brand Protection

Sponsored byCSC

DNS

Sponsored byDNIB.com

NordVPN Promotion