We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Hacker News·Jun 10·5 min read
Aws.com and google.com don't have DNSSEC enabled
TL;DR
Major domains like aws.com and google.com lack DNSSEC (Domain Name System Security Extensions) protection, which helps prevent DNS spoofing. A tool called delv was used to check the DNSSEC status of these domains.
✦ Why It Matters
Enabling DNSSEC is crucial for protecting against DNS spoofing and ensuring secure internet communications.
Key Takeaways
- Check if your domain has DNSSEC enabled.
- Consider implementing DNSSEC to protect against DNS spoofing.
- Use tools like delv to verify DNS configurations.
- Stay informed about security practices for DNS management.
How It Works
DNSSEC works by adding a layer of security to the DNS lookup process. It uses cryptographic signatures to ensure that the responses received from DNS servers are authentic and have not been altered.
When a DNS resolver queries a domain with DNSSEC enabled, it receives not only the DNS records but also a signature that can be verified against a public key. This verification process helps prevent attacks such as cache poisoning, where an attacker could redirect users to malicious sites.