- 01-08-24BIT geeft kaarten weg voor F1 in Zandvoort
- 24-04-24Status.bit.nl in nieuw jasje!
- 12-04-24Nieuw bij BIT: GPU hosting
- 25-03-24BIT breidt netwerkconnectiviteit uit met aansluiting op NL-ix^2
- 13-03-24No More Leaks: Samenwerken tegen cybercriminaliteit
- 03-03-24Geen verandering twee jaar na invoering sancties tegen Russische media: FOIC roept (wederom) op tot einde van ondemocratische censuur
- 29-01-24Onzichtbare upgrades
- 16-01-24BIT's Wido Potters wint Felipe Rodriquez Award voor inzet voor privacy
- 10-01-24BIT en partners zetten de koers voor een gedecentraliseerde Europese cloud met ECOFED-project
- 02-01-24Onze eigen stroom inkopen: de resultaten van 2023
BIT now has reverse DNS zones signed with DNSSEC
19-08-2018 09:44:07
Internet operates with domain names and IP addresses. An IP address is connected to a domain name and that connection has been protected at BIT for the last few years by the implementation of DNSSEC signatures on the DNS traffic.
DNSEC
Clients who wish to do so can enable DNSSEC for their domain names in the BIT-Portal. Simply put, this means that answer of the DNS cannot be altered ‘on route’, which creates more security that when you access httsp://example.nl, you are truly accessing the servers of example.nl.
Reverse DNSSEC
Since the start of august, BIT also has all its ‘reverse DSN zones’ signed with DNSSEC. Both for IPv4 as for IPv6 addresses! Because domain names come with IP addresses, but you could (roughly) say that IP addresses are always connected to a name. This is called the ‘reverse’ of an IP address and is also in the DNS, like domain names. Since august, BIT has also secured this ‘reverse DNS’ with DNSSEC!
Why now? While we have been implementing ‘forward’ DNSSEC for years? The step from IP to domain name is much less important for the safe operation of the internet than the step from domain name to IP. The chance of someone causing problems by ‘changing’ the name connected to an IP address into something that is not correct, is very small. The biggest risk is in ‘changing’ the IP address connected to a domain name to redirect internet traffic to an incorrect site. We have mostly activated this DNSSEC protection ‘because we can’ and we like to do things thoroughly.
Did you, in consultation with BIT, get the reverses for IP addresses delegated to you and did you arrange their signing yourself? Give us a call, so we can ensure that the delegation to you is also secure!
By: Sander Smeenk