0% checking in from Australia
Is your internet up to date?
11–20 of 78 posts
Re: Is your internet up to date?
#12[deleted]
Re: Is your internet up to date?
#13Wow, this is terribly misleading DNSSEC propaganda. It tells me: "Protected from redirection to false IP addresses (DNSSEC)" What does that mean? It means that whatever other DNS server I use seems to verify DNSSEC signatures (I use Google's DNS fwiw). Yet this doesn't provide any reasonable sense of protection, as the connection to that DNS server may very well be compromised. This would very well show DNSSEC protec…
The question for many residential internet users is: Just because I set my DNS to Google's, do my request really arrive there? Or does my ISP use transparent DNS proxies? I know that for many ISPs around here (Telekom especially), setting your DNS doesn't have any effect unless you run a local resolver (or DNScrypt). More info and how to test if you are affected by this: https://news.ycombinator.com/item?id=13037858
Just because you've securely looked up an IP address, do your packets really arrive there?
That's why DNSSEC without DANE seems pointless (and with DANE/TLS seems redundant).
Re: Is your internet up to date?
#14Wow, this is terribly misleading DNSSEC propaganda. It tells me: "Protected from redirection to false IP addresses (DNSSEC)" What does that mean? It means that whatever other DNS server I use seems to verify DNSSEC signatures (I use Google's DNS fwiw). Yet this doesn't provide any reasonable sense of protection, as the connection to that DNS server may very well be compromised. This would very well show DNSSEC protec…
I thought DNSSEC was supposed to be verifiable by the client ? If it isn't then it's pointless in the way that you suggest, but I find it hard to believe that hole was left.
It can be verified by the client [1] (wikipedia link also has RFC source), but typically the verification is done by the resolver, which introduces the problem that a client has to trust the resolver and the network from resolver to the client (last mile problem)
1: https://en.wikipedia.org/wiki/Domain_Name_System_Security_Ex...
Re: Is your internet up to date?
#15Yes, my internet is up to date.
Re: Is your internet up to date?
#16Not really reliable.
I have full IPv6 connectivity and it tells me the opposite.
Re: Is your internet up to date?
#17Earlier quoted context omitted.
The question for many residential internet users is: Just because I set my DNS to Google's, do my request really arrive there? Or does my ISP use transparent DNS proxies? I know that for many ISPs around here (Telekom especially), setting your DNS doesn't have any effect unless you run a local resolver (or DNScrypt). More info and how to test if you are affected by this: https://news.ycombinator.com/item?id=13037858
Just because you've securely looked up an IP address, do your packets really arrive there? That's why DNSSEC without DANE seems pointless (and with DANE/TLS seems redundant).
It's a different threat model. Classical DNS (i.e. without port randomization and a whole host of other tricks) is very easy to spoof from all over the internet.
Inserting yourself between a client and a server is way more difficult.
Note that from the point of traffic analysis, you still don't want your TLS traffic to go through a third party.
So if your thread model mostly includes nation-state attackers then DNSSEC is only useful for DANE. If you also want to secure a lookup of, for example, pool.ntp.org then DNSSEC for A and AAAA records also makes sense.
Re: Is your internet up to date?
#18Earlier quoted context omitted.
Mine is, and I live in the UK also. I'm not sure what joke you're making. Sure, we may not have the best bandwidth (although at my previous house I had 250MBit), but supporting IPv6 (etc) has nothing to do with being in the UK. Find a decent ISP, I recommend Zen (or if you can afford them, AA).
Depends where you live. In Storrington the internet is rubbish and no phone signal. This is 2017 UK. Driving to London from that region you lose mobile signal at least 5 times completely. People act so entitled when they live in cities; I happen not to like cities which makes me a minority, but there are plenty of wealthy business people crying every day about their connection south of London (and probably in more pl…
My parents live in a Dorset village and have the same issues. I'm on Three and even in the nearest towns (Dorchester, pop. 20k and Weymouth, pop. 50k) there is usually no or a very weak signal. They finally rolled out BT Infinity last year, so at least that's something.
I live in Lithuania now and it really shocks me how bad the UK is for these things. Here I have 600/600 FTTH for €20/month and LTE is basically universal, even in remote parts of the country.
Re: Is your internet up to date?
#19Earlier quoted context omitted.
I can get an unreliable 3Mbps with the wind in the right direction on Openreach, or anything up to 200Mbps on Virgin Media. I'd rather not use VM's heavily filtered IPv6-free zone, but it's not a question of not being able to afford a decent ISP, it's just practicality.
I use Virgin Media and have no problems on any of my devices. Downlink can be a bit slower at busy times, but I guess that's nature of cable internet and uplink is always at the limit. And I really like that they very rarely change IP addresses (have mine for at least 3 months now). I have the feeling that Sky has slightly better peering (more stable speed to US & Asia during peak hours), but the higher speed on VM i…
IF you mean missing availability of ipv6, I don't think that there are any pages you can't see on ipv4?
And there won't be while ISPs are lagging in their adoption, meaning nobody can set up a IPv6-only site if they expect to be accessible by everyone.
Also, there's more than sites: an IPv4-only client can't connecting directly (P2P) to other clients behind carrier-grade IPv4 NAT, which leads to more centralized systems (and which give an advantage to large companies over more independent developers and open source groups).
These ISPs are holding everyone back, hence the site submitted in this thread.
Re: Is your internet up to date?
#20> Is Your Internet Up-To-date? Of course it isn't. I live in the UK.
Mine is, and I live in the UK also. I'm not sure what joke you're making. Sure, we may not have the best bandwidth (although at my previous house I had 250MBit), but supporting IPv6 (etc) has nothing to do with being in the UK. Find a decent ISP, I recommend Zen (or if you can afford them, AA).
I live in India and having 4 Mbps, which is a luxury. Not ready for IPv6. Situation is improving a lot recently though.