Waht is OpenDNS?

Started May 9, 2012 | Discussions thread
malch Forum Pro • Posts: 14,048
Re: Integrity

CAcreeks wrote:

Looks like there might be faster DNS servers than OpenDNS, but OpenDNS "feels" faster than our DSL provider's DNS. Scroll down to see namebench response graphs:

Speed and availability are important considerations when selecting a DNS service/provider. However, integrity is important also. Keep in mind that:

1. A rouge DNS server can reroute your https://yourbank.com/ requests to a completely fake server operated by organized criminals! This isn't hypothetical -- it really happens.

2. A poorly managed DNS server can be vulnerable to attack such that bad guys can hack it resulting in https://yourbank.com/ being directed to a completely fake server operated by organized criminals! This isn't hypothetical -- it really happens.

3. Some DNS providers are tempted to direct failed lookups to one of their own servers which displays a "helpful" search page. This is basically an opportunity for them to make advertizing revenue off the back of your typos. This isn't hypothetical -- it really happens. In 2003, even Verisign/Network Solutions as the trusted keepers of the root of the DNS system were so tempted. They were forced to back off after a struggle:

http://bcn.boulder.co.us/~neal/ietf/verisign-abuse.html

Keep these facts in mind when you configure your DNS settings.

Post (hide subjects) Posted by
Keyboard shortcuts:
FForum PPrevious NNext WNext unread UUpvote SSubscribe RReply QQuote BBookmark MMy threads
Color scheme? Blue / Yellow