'Net security gets root-level boost

http://www.nwfusion.com/news/2003/1027ddos.html

-Hank

Love this quote from Verisign:

"We tested Anycast for about a year...to monitor its behavior,"
Silva says. "These are important servers, and we didn't want to
make any rash decisions about deploying it."

It is a little bit surreal - its not like anycast is some weird, new, or
revolutionary technology. BGP is surely not a black art to the folks at
Verisign - and little is required to do anycast, other than some minor
routing configuration. Two possible solutions - Verisign is so big that
institutional paralysis has set in, or, they now say this when asked about
any configuration change. Either way, its unacceptable for them to be
fulfilling their contract in this manner.

Date: Tue, 28 Oct 2003 10:41:56 -0500
From: Barney Wolff

>
> http://www.nwfusion.com/news/2003/1027ddos.html

Love this quote from Verisign:

"We tested Anycast for about a year...to monitor its behavior,"
Silva says. "These are important servers, and we didn't want to
make any rash decisions about deploying it."

*gag*

And wildcard entries?

Eddy

> Love this quote from Verisign:
>
> "We tested Anycast for about a year...to monitor its behavior,"
> Silva says. "These are important servers, and we didn't want to
> make any rash decisions about deploying it."

*gag*

And wildcard entries?

at the icann-secsac meeting in wdc on 15oct03, verisign said that they
had turned the wildcard on several times, for a minute or two each time,
without notice to the community, in order to ensure that there were no
operational problems with it. so, apparently, testing is a way of life.

(sadly for me personally, they didn't give dates or times that these
tests had been run, nor did they say they would preannounce future tests,
so nobody but verisign will be able to synchronize other measurements
with these tests.)