A screenshot of the OpenDNS DNSCrypt page
(WEB HOST INDUSTRY REVIEW) – -Open-source DNS security provider OpenDNS announced on Tuesday it is now previewing DNSCrypt, a new technology that significantly improves both the security and privacy of Internet users, particularly those on unsecured wireless hotspots and residential ISP networks.
Open-sourced by OpenDNS, the solution is currently only available for Mac on the OpenDNS website. It will also soon be posted on GitHub.com for developers to review and improve.
DNS has long been one of the more insecure areas of the Internet’s critical infrastructure, despite ongoing attempts to improve the issue with technologies like DNSSEC.
There is an insecure connection between the end user and their DNS resolver because the DNS protocal itself is being transported in plaintext, unencrypted and in the open.
The insecure connection opens users to potential attacks and privacy violations, particularly when accessing the Internet on unsecured wireless networks.
DNSCrypt encrypts all DNS traffic between Internet users and OpenDNS, which is used by more than 30 million Internet users.
The script prevents attackers and even ISPs from spying on DNS activity or maliciously redirecting DNS traffic without making any changes to domain names or proces.
Aside from preventing users from being spied on, DNSCrypt also protects them from man-in-the-middle attacks where an attacker intercepts communication and impersonates both the Internet user and the website being visited, and resolver impersonation.
“DNSCrypt is a critical advancement for the DNS, for global Internet security efforts and for the Internet at large,” said OpenDNS CEO David Ulevitch. “The technology empowers Internet users to secure their own Internet and DNS use and protect themselves from nefarious activity that happens through their DNS connection, but also to insulate themselves from their Internet Service Provider’s uninhibited access to their DNS activity and domain lookup history. All Internet users have a right to privacy and DNSCrypt gives them both that and a heightened level of security.”
No related posts.
