[ogWiFi] Restrictions to public sites via ogWifi

[Tracey P. Lauriault]

Michael!  We waited for you tonight!

On Mon, May 18, 2009 at 7:54 PM, Michael Richardson <
mcr at sandelman.ottawa.on.ca> wrote:

>
> >>>>> "Ian" == Ian Gough <igough57 at gmail.com> writes:
>    >>  My problem with OpenDNS is that it is disruptive to significant
>    >> security against the very real, and relatively common DNS attacks
>    >> that are occuring today: these mostly affect bank sites.
>
>    Ian> I guess I don't understand this. How is using OpenDNS
>    Ian> disruptive to security? Is it any more insecure than the ISP's
>    Ian> DNS server?
>
>  In order for OpenDNS to function, it has to either change the answers
> to DNS lookups, or it has to return "site not found".  Both of these
> kinds of changes are things that DNSSEC is designed to prevent.
>
>  The ISP's DNS can be have it's security features turned on.  As well,
> it is expected that home routers will turn on security features in new
> firmwares.  (With OpenWRT, we could turn them on today)
>
> --
> ]     Y'avait une poule de jammé dans l'muffler!!!!!!!!!        |
>  firewalls  [
> ]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net
> architect[
> ] mcr at sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device
> driver[
> ] panic("Just another Debian GNU/Linux using, kernel hacking, security
> guy"); [
>
> _______________________________________________
> Ottawa-Gatineau WiFi (ogWiFi)'s mailing list
> ogwifi at floral.org
> http://list.flora.ca/mailman/listinfo/ogwifi
>



-- 
Tracey P. Lauriault
613-234-2805
https://gcrc.carleton.ca/confluence/display/GCRCWEB/Lauriault
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.flora.ca/pipermail/ogwifi/attachments/20090519/67c64173/attachment.html