Blue Folder With Keyhole on digital background

Increasing the Strength of the Zone Signing Key for the Root Zone

One of the most interesting and important changes to the internet’s domain name system (DNS) has been the introduction of the DNS Security Extensions (DNSSEC). These protocol extensions are designed to provide origin authentication for DNS data. In other words, when DNS data is digitally signed using DNSSEC, authenticity can be validated and any modifications detected.

A major milestone was achieved in mid-2010 when Verisign and the Internet Corporation for Assigned Names and Numbers (ICANN), in cooperation with the U.S. Department of Commerce, successfully deployed DNSSEC for the root zone. Following that point in time, it became possible for DNS resolvers and applications to validate signed DNS records using a single root zone trust anchor.

DNSSEC works by forming a chain-of-trust between the root (i.e., the aforementioned trust anchor) and a leaf node. If every node between the root and the leaf is properly signed, the leaf data is validated. However, as is generally the case with digital (and even physical) security, the chain is only as strong as its weakest link.

Resolving a Query with DNSSEC

To strengthen the chain at the top of the DNS, Verisign is working to increase the strength of the root zone’s Zone Signing Key (ZSK), which is currently 1024-bit RSA, and will sign the root zone with 2048-bit RSA keys beginning Oct. 1, 2016.

(more…)

Verisign Q4 2015 DDoS Trends: Attack Activity Increases 85 Percent Year Over Year

Verisign just released its Q4 2015 DDoS Trends Report, which provides a unique view into online distributed denial of service (DDoS) attack trends from mitigations enacted on behalf of customers of Verisign DDoS Protection Services and research conducted by Verisign iDefense Security Intelligence Services.

Every industry is at risk as DDoS attacks continue to increase in size, sophistication and frequency. The most notable observation last quarter is the increase in DDoS attack activity, which was at its highest since the inception of Verisign’s DDoS Trends Report in Q1 2014. Comparing year-over-year attack activity, Verisign mitigated 85 percent more attacks in Q4 2015 than in Q4 2014. Some customers were hit with persistent, repeated attacks over the quarter.

(more…)

Priority Access Program for Verisign’s First IDN New gTLD, .コム

Guest post from Manish Dalal, Vice President, Verisign Naming Services Asia 

Verisign launched its first IDN new gTLD, .コム – the .com you know, now in Japanese – on Dec. 9, 2015 at 12:00 a.m. UTC. We recently submitted updated TLD Startup Information for .コム to ICANN, extending the end date for the .コム Sunrise Period from Jan. 31, 2016, to March 14, 2016, and shifting the dates of the subsequent registration periods. ICANN recently confirmed the following updated registration periods for the .コム TLD*:

Sunrise Period: Dec. 9, 2015 – March 14, 2016

Priority Access Program Period: March 15 – May 15, 2016

Landrush Program Period: May 16 – June 12, 2016

General Registration Period: Start Date June 13, 2016

Trademark Claims Period: June 13 – Sept. 11, 2016

(more…)

Five Reasons Every Small Business Needs a Website

The 2015 holiday shopping season was a good one for businesses online. Thanks to strong sales from Black Friday and Cyber Monday, online retailers reported an increase in sales of 15 percent from the previous year with Cyber Monday proving to be the largest online sales day ever, netting $3.07 billion.

However, only 51 percent of small businesses have websites, despite the fact that 97 percent of consumers search for products and services online, according to figures released earlier from The SCORE Association (SCORE).

The disconnect between small companies and the growing number of consumers who vet brick-and-mortar businesses based on their online presence could be keeping entrepreneurs from millions of customers – and dollars. SCORE Vice President of Marketing Bridget Weston Pollack said, “If a company or a small business doesn’t have an online presence, they are missing a huge percentage of the population that could be shopping at their store.”

(more…)