It doesn't require any changes to domain names or how they work, it simply provides a method for securely encrypting communication between our customers and our DNS servers in our data centers. In the same way the SSL turns HTTP web traffic into HTTPS encrypted Web traffic, DNSCrypt turns regular DNS traffic into encrypted DNS traffic that is secure from eavesdropping and man-in-the-middle attacks. There have been numerous examples of tampering, or man-in-the-middle attacks, and snooping of DNS traffic at the last mile and it represents a serious security risk that we've always wanted to fix. DNSCrypt is our way of securing the "last mile" of DNS traffic and resolving (no pun intended) an entire class of serious security concerns with the DNS protocol. That said, the class of problems that the Kaminsky Vulnerability related to were a result of some of the underlying foundations of the DNS protocol that are inherently weak - particularly in the "last mile." The "last mile" is the portion of your Internet connection between your computer and your ISP. Many will remember the Kaminsky Vulnerability, which impacted nearly every DNS implementation in the world (though not OpenDNS).
While OpenDNS has provided world-class security using DNS for years, and OpenDNS is the most secure DNS service available, the underlying DNS protocol has not been secure enough for our comfort.
It's used any time you visit a website, send an email, have an IM conversation or do anything else online. Securing a critical piece of Internet infrastructureīackground: The need for a better DNS securityĭNS is one of the fundamental building blocks of the Internet. DNSCrypt consiste en un software el cualo se encarga de la codificacion y decifrado de los datos ademas de que este programa configura las DNS´s de OpenDNS como las predeterminadas en la configuracion de red. Tambien si recuerdan traje la mencion del uso de las DNS proporcionadas por google que tambien son bastante eficaces -aunque ahora empiezop a dudar si quiero que google se encarge de ver mi trafico de datos ante su aparente plan de monopolizar los servicios e informacion de la internet-.Ĭomo sea, ahora les traigo el nuevo servicio que ofrece OpenDNS para asegurar que nuestros datos solo sean legibles para nuestro equipo y no tener mirones en la linea.ĭNSCrypt: Servicio proporcionado por OpenDNS el cual codifica los datos salientes de nuestro equipo hacia la internet para mantener la confidencialidad de estos, por ahora solo presente para los macusers aunque ya han prometido que dentro de poco tambien lo tendremos disponible para usuarios de PC con windows y linux -y creo solaris tambien.
Ya les habia traido el uso de las DNS mas eficientes de OpenDNS y la recomendacion para usarlas ya sea en el equipo o desde el router.
0 kommentar(er)
