SA Internet security issues

Hi,

I posted to [email protected] about the technical issues related to
DNS security. Then, I realized that this is a national or South African
issue and that it potentially affects everyone.

recently one of my clients went to his bank and ended up in France.

In short, when you visit your bank, blog or whatever you may not be
going where you think you are going. I guess you all know this as there
are many ways, including bgp etc of redirecting your traffic to
wherever. Even people like myself, that use very strong encryption to
verify that the ip number that I am talking to is the IP number that I
want to be talking to can be compromised :)

However, when an ISP provides you with DNS servers as part of your dhcp
lease, or whatever, you are completely in the hands of that ISP if you
visit your bank, etc. and if the staff at that ISP are criminally
inclined, or the ISP is hacked, or so many other scenarios (poisoning,
bad sec, etc etc) - you are at risk.

This has never been a major issue, and we all know what our risks are,
the Internet is and has always been a hostile place.

but the landscape has changed. South Africa has become low hanging

fruit on the tree of crime.

and you, I and everyone else are easy targets.

Our Police services have qualified cyber crime experts, but they are
over run with cases, complaints and imnsho, cannot keep up.  There are
border, international and many other issues and priorities depends on
how the wind is blowing in that day, week or month.

Anyway, the .com zone was signed (dnssec) on the 1st of April 2011
and co.za project (co.za zone supposed to be signed) from 22 August 2016
to 14 April 2017... It looks as if this project just died for some
reason. There are no clear explanations whether it is policy (for
example key management) or a power struggle or what? - lack of
interest? What are the delays and what are the complications? Can we
help? What can be done? 

For myself, whether my ISP uses dnssec would (and should) be a business
factor - a competitive advantage, etc. 

Technically, DNSSEC is no silver bullet, but it will improve Internet security for
the small guy, the guy at home and the small business (and for you) 

Your thoughts?

Andre

 


_______________________________________________
IOZ mailing list
[email protected]
http://lists.internet.org.za/mailman/listinfo/ioz