"Internet users face the risk of losing their internet connections on 5 May when the domain name system switches over to a new, more secure protocol.

While the vast majority of users are expected to endure the transition to DNSSEC smoothly, users behind badly designed or poorly configured firewalls, or those subscribing to dodgy ISPs could find themselves effectively disconnected...."

http://www.theregister.co.uk/2010/04/13/dnssec

Run the test here > http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues

My results:

Announced buffer size: 4096 bytes

Measured buffer size: 3839 bytes

EDNS enabled: yes

DNSSEC enabled: yes

*Red* Your resolver announced a buffer size bigger than the largest packet that it can receive.


What does this mean,WILL I BE OK???


I DONT KNOW WHY THEY HAVE TO CHANGE THINGS,IT WAS WORKING FINE THE WAY IS WAS FOR YEARS!!!

Is this your router or your on box resolver?

BTW, the whole DNSSEC design is one big kludge.

The big boys and professional fearmongers want it because there's money in it.

The fact that the Emperor isn't wearing any clothes is, apparently, completely irrelevant.

Ya... And they dont care if it causes problems for people :(

Lets see what happens. Maybe they will stop it, if the whole internet isn't reachable anymore :)

thats totally ridiculous i would say,why do they need to make such changes,is not the old system working fine? this is totally weird and out of mind

thats totally ridiculous i would say,why do they need to make such changes,is not the old system working fine? this is totally weird and out of mind

It's important.


Check out;

http://arstechnica.com/security/news/2009/07/saving-us-from-forged-dns-data-an-update-on-dnssec.ars

http://www.dd-wrt.com/phpBB2/viewtopic.php?p=435800

I don't know that it'll affect end-users as it's made out like it would... Time will tell I suppose.

I'm running DD-WRT on my router which is why I searched and found that thread. This is the first result so I'm going to keep looking :)

Upon reading further upon the implementation it looks like it will only cause issues if you try to validate the domains using DNSSEC and your resolvers you are using don't support it but if you don't attempt the validation I don't believe you'd have issues.

There must be a reason why they must be implementing the change. Thanx The Dude for providing with the link to test. Now i have to figure how to use it.

Do i as a user have to do the check on my machine or i ask my ISP to run the rest on their routers ??

Thanx