Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Is your internet up to date?

en.conn.internet.nl

Post reply on HN
Print view View original

41–50 of 78 posts

Re: Is your internet up to date?

#41

Post by lucaspiller »

DaiPlusPlus wrote: post #22
lucaspiller wrote: post #18

Earlier quoted context omitted.

My parents live in a Dorset village and have the same issues. I'm on Three and even in the nearest towns (Dorchester, pop. 20k and Weymouth, pop. 50k) there is usually no or a very weak signal. They finally rolled out BT Infinity last year, so at least that's something. I live in Lithuania now and it really shocks me how bad the UK is for these things. Here I have 600/600 FTTH for €20/month and LTE is basically unive…

It's cheap in Lithuania and other countries because they were was no significant prior investment in telecoms infrastructure, and the costs of deployment are generally lower too (cheaper labour, easier planning-permission) - so when it comes to deploying Internet access to a previously disconnected community it only makes sense to roll-out the bleeding-edge technology (e.g. FTTH). Whereas in the UK, BT was/is obsesse…

One of the things that really helped is that all passive telecommunications infrastructure is by law "common use" - so things like ducts, pipe work, man holes, poles, etc can be used by any company. This has really helped to level the playing field so a single company doesn't have an unfair monopoly because it was there first (cough BT cough). Where I'm living right now cable and DSL was available (maybe up to 50mbit?), but last year fibre was rolled out by a different company. There are also guidelines on how the infrastructure should be delivered within buildings, so most apartment buildings have duct work going from the basement to the top floor, and space for the providers equipment for future upgrades.

Edit: Looks like Ofcom wants to do something similar: http://www.ispreview.co.uk/index.php/2016/02/a-closer-look-a...

Re: Is your internet up to date?

#42

Post by danyork »

ribasushi wrote: post #37
hannob wrote: post #33

Earlier quoted context omitted.

Well, the traffic is not encrypted or otherwise protected, so a firewall trying to be "smart" could do all kinds of things. E.g. not letting you connect to other DNS servers at all or filtering all queries with unusual record types.

But the point of DNSSEC isn't to protect your ability to contact another server, just like the point of SSL isn't to be a substitute for TOR. Are we on the same page that with DNSSEC activated on a local resolver one would either get an authentic answer, or nothing at all?

Correct. And if the local resolver is sufficiently close to your client that there is very low risk of an attacker getting into your local network, then you can have a higher degree of trust in those validated answers from your resolver.

Re: Is your internet up to date?

#44

Post by ribasushi »

hannob wrote: post #39
ribasushi wrote: post #37

Earlier quoted context omitted.

But the point of DNSSEC isn't to protect your ability to contact another server, just like the point of SSL isn't to be a substitute for TOR. Are we on the same page that with DNSSEC activated on a local resolver one would either get an authentic answer, or nothing at all?

> Are we on the same page that with DNSSEC activated on a local resolver one would either get an authentic answer, or nothing at all? Sure. But it's not very relevant, because almost nobody does that. And that's unlikely to change, because getting nothing at all isn't a very desirable state of affairs. And given that forcing local DNSSEC resolvers in an OS or a browser would likely mean that a large share of your use…

> And that's unlikely to change, because getting nothing at all isn't a very desirable state of affairs.

It worked for HTTPS - more and more browser builds refuse to show you stuff, with no workaround, even if there is nothing wrong with the certificates ( cough-sha1-cough-or-cough-chrome-cert-transparency-cough ). Yet I don't see any users revolt.

Claiming that having an all-or-nothing HTTPS is a-ok, yet having all-or-nothing DNS is unacceptable is... inconsistent.

Re: Is your internet up to date?

#46

Post by tedmiston »

alexdumitru wrote: post #36
alicewales wrote: post #2

> Is Your Internet Up-To-date? Of course it isn't. I live in the UK.

Come to Romania. We have IPv6, 1Gbps for just ~6 pounds. And as a bonus I got two 3G SIM cards + usb modems with unlimited traffic entirely free. http://www.speedtest.net/result/5951144497.png

How do you have it so fast and so cheap? This is far better than what most of us have in the US by the way.

Re: Is your internet up to date?

#47

Post by danyork »

pjc50 wrote: post #8
hannob wrote: post #4

Wow, this is terribly misleading DNSSEC propaganda. It tells me: "Protected from redirection to false IP addresses (DNSSEC)" What does that mean? It means that whatever other DNS server I use seems to verify DNSSEC signatures (I use Google's DNS fwiw). Yet this doesn't provide any reasonable sense of protection, as the connection to that DNS server may very well be compromised. This would very well show DNSSEC protec…

I thought DNSSEC was supposed to be verifiable by the client ? If it isn't then it's pointless in the way that you suggest, but I find it hard to believe that hole was left.

Sure, the client application can validate DNSSEC if it is using a DNS library that supports DNSSEC. Examples include:

- getDNS - https://getdnsapi.net/

- ldns - https://nlnetlabs.nl/projects/ldns/

The application simply has to perform the actual validation itself (versus using another resolver).

Re: Is your internet up to date?

#48

Post by danyork »

pjc50 wrote: post #8
hannob wrote: post #4

Wow, this is terribly misleading DNSSEC propaganda. It tells me: "Protected from redirection to false IP addresses (DNSSEC)" What does that mean? It means that whatever other DNS server I use seems to verify DNSSEC signatures (I use Google's DNS fwiw). Yet this doesn't provide any reasonable sense of protection, as the connection to that DNS server may very well be compromised. This would very well show DNSSEC protec…

I thought DNSSEC was supposed to be verifiable by the client ? If it isn't then it's pointless in the way that you suggest, but I find it hard to believe that hole was left.

You also could run your own DNS resolver on your local device and do the DNSSEC validation there.

One example of this bundled up in a way that is easy to install is DNSSEC-Trigger: https://nlnetlabs.nl/projects/dnssec-trigger/

More info in this blog post from Red Hat: http://developerblog.redhat.com/2015/04/14/writing-an-applic...

Re: Is your internet up to date?

#49

Post by qubitcoder »

eumoria wrote: post #38
alexdumitru wrote: post #36

Earlier quoted context omitted.

Come to Romania. We have IPv6, 1Gbps for just ~6 pounds. And as a bonus I got two 3G SIM cards + usb modems with unlimited traffic entirely free. http://www.speedtest.net/result/5951144497.png

O.o I'm in New York City which for America has pretty decent fiber service and 100mbit costs ~61 pounds ($75). Very jealous!

For what it's worth, I'm getting 1,000Mbps with AT&T Fiber for $75 a month. I'm located just an hour northwest of Atlanta, in Rome, Georgia.

Re: Is your internet up to date?

#50

Post by ubertaco »

qubitcoder wrote: post #49
eumoria wrote: post #38

Earlier quoted context omitted.

O.o I'm in New York City which for America has pretty decent fiber service and 100mbit costs ~61 pounds ($75). Very jealous!

For what it's worth, I'm getting 1,000Mbps with AT&T Fiber for $75 a month. I'm located just an hour northwest of Atlanta, in Rome, Georgia.

Over in Cherokee County, meanwhile, it's $70/mo with Comcast for 75Mbps. I was hopeful for a Google Fiber rollout when they announced it, but no dice.
Post reply on HN