Re: [IOZ.tech] DNS security issues at some ISPs affecting small business owners

Andre,


The .za signing project has a list @ 
http://lists.coza.net.za/listinfo/zadnsops . I see the archives are not 
working - will see if I can get that fixed.

As to the the silence you experience, I'd suggest reading, and taking 
advice from http://www.catb.org/esr/faqs/smart-questions.html . In your 
list emails that I see, you break a lot of the advice in that document, 
and this results in people ignoring you.

--Calvin



On 06/06/2017 08:30, ox wrote:
> On Tue, 6 Jun 2017 08:00:38 +0200
> Mogamat - TABITS <[email protected]> wrote:
>> On 2017-06-05 10:00 AM, Nishal Goburdhan wrote:
>>> tbh, i think that’s just your paranoia  :-)
>>> ie.  don’t attribute to malice that ..
>>> i don’t see a parallel between one ISP returning an incorrect
>>> answer for a single domain, and the ZA DNSSEC project.
>> We've seen DNS spoofing attacks out of poland on MTN's DNS servers
>> which hit us quite hard, as MTN would honour obscene TTLs and return
>> incorrect NS ip's for our NS which redirected all our clients on MTN
>> business/Afrihost networks. We had to escalate it through multiple
>> channels over a number of frustrating days to get it to MTN biz NOC.
>> We really need a professional forum for DNS/Security related matters"
>> affecting the ZA internet - trying to check DNS propagation with the
>> various ZA ISP;'s is a major/impossible pain for example.
>>
> Have you guys been discussing the issues off list as well? I have
> received quite a few off list emails and this community has many issues.
>
> For one: There is a lot of fear.
>
> Why are people scared of the people at the registry? or at .africa ?
> The people at the Registry (and at .africa) are nice, good and as far
> as I know, ethical people. They do not target people who do not agree
> with them.. Mark Elkins, Calvin Browne, Theo Kramer are the good guys.
>
>
> Then, I do not agree with Mogamat that we need a " professional forum
> for DNS/Security related matters" this list is perfectly fine for
> discussing technical issues.  Or, if there are some that feel some
> others are not 'professional' is the idea to close off access to any
> such new list? or what?
>
> The closed and secret nature of how things work in this country has a
> lot to do with the fact that IOZ has basically died.
>
> I posted to the main IOZ list, something which should raise at least
> some sort of discussion, yet, eerie silence.
>
> Questions about co.za DNSSEC still remains unanswered.
>
> Nobody is accountable? yet the co.za domain space does turnover of at
> least R50+ million per year?
>
> The fact that South African ISPs are using DNS to bully smaller
> players out of the market, makes no news...
>
> The fact that small businesses pay for co.za domain names and with no
> DNSSEC could suffer financial losses due to ISPs cutbacks, criminal
> syndicates and other reasons, makes no news...
>
> Already, it is impossible for new young black companies to make any
> inroads into running their own ISP, and the larger players are getting
> larger, more bold, more mischievious by the day.
>   
>
> I am also cross posting this post to the general IOZ list. If I am
> banned for that, so be it, the Internet Community in SA is busy dying,
> there is only a handful of powerful players, and they make the
> rules, set the playing field and now they are also doing evil things
>
> all in the darkness of silence - as everyone else has their own agenda
> (or are simply ignorant)
>
> Andre
>
> _______________________________________________
> tech mailing list
> [email protected]
> http://lists.internet.org.za/mailman/listinfo/tech


_______________________________________________
IOZ mailing list
[email protected]
http://lists.internet.org.za/mailman/listinfo/ioz