[CPWG] [technical-issues] Cyberspies Hijacked the Internet Domains of Entire Countries

[Marita Moll]

There's no denying the potential end user impact.

Marita

On 4/20/2019 4:24 AM, Holly Raiche wrote:
> Hi Olivier
>
> Why isn’t this something that ALAC should take up?
>
> Holly
>
>> On Apr 20, 2019, at 3:30 AM, Olivier MJ Crépin-Leblond <ocl at gih.com 
>> <mailto:ocl at gih.com>> wrote:
>>
>> Dear colleagues,
>>
>> I have just read an article on Wired that speaks of mass scale cyber 
>> attacks on the DNS:
>> https://www.wired.com/story/sea-turtle-dns-hijacking/
>>
>> This looks very serious indeed. Furthermore, it appears to be 
>> happening on domains that are not DNSSEC enabled/signed. And of 
>> course, this is a known vulnerability. But one thing that has somehow 
>> shocked me was that one of the way to avoid this was using a 
>> "Registry Lock" which many Registries were unwilling to implement.
>>
>> Is it time to (a) ask SSAC what this is all about and (b) get the 
>> ICANN Board to mandate an essential security implementation before 
>> the whole DNS falls apart for lack of trust? Or is this article way 
>> too alarmist? My big concern at the moment is that if I was a 
>> Government representative, I'd ask "who runs this DNS?" and upon 
>> being told it's ICANN, I'd think that ICANN is incompetent in making 
>> the DNS safe from attack. As a result -> DNS is a critical resource 
>> -> get it run by countries rather than this incompetent organisation. 
>> (a lose-lose for all of us)
>>
>> Kindest regards,
>>
>> Olivier
>> _______________________________________________
>> Technical-issues mailing list
>> Technical-issues at atlarge-lists.icann.org 
>> <mailto:Technical-issues at atlarge-lists.icann.org>
>> https://atlarge-lists.icann.org/mailman/listinfo/technical-issues
>
>
> _______________________________________________
> CPWG mailing list
> CPWG at icann.org
> https://mm.icann.org/mailman/listinfo/cpwg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/cpwg/attachments/20190420/2e5c5226/attachment.html>