Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Is your internet up to date?

en.conn.internet.nl

Post reply on HN
Print view View original

61–70 of 78 posts

Re: Is your internet up to date?

#61

Post by tbrownaw »

hannob wrote: post #23
pjc50 wrote: post #8

Earlier quoted context omitted.

I thought DNSSEC was supposed to be verifiable by the client ? If it isn't then it's pointless in the way that you suggest, but I find it hard to believe that hole was left.

Congratulations, you've understood the main hole of dnssec. The thing is: you can verify dnssec on the client. In theory. It's just that 99,9% (rough estimate, may be higher) of people don't. You'd have to run your own resolver. Which might work, if your ISP isn't doing funny things with your DNS traffic. Which some ISPs do. Which means it can't be deployed widely. This thing was built in the 90s when people assumed…

What do you mean, "run your own resolver"? That's a fancy name for the library that the application uses to speak DNS, not a separate thing that has to be set up, run, etc, separately.

Re: Is your internet up to date?

#62

Post by extrapickles »

lucaspiller wrote: post #41
DaiPlusPlus wrote: post #22

Earlier quoted context omitted.

It's cheap in Lithuania and other countries because they were was no significant prior investment in telecoms infrastructure, and the costs of deployment are generally lower too (cheaper labour, easier planning-permission) - so when it comes to deploying Internet access to a previously disconnected community it only makes sense to roll-out the bleeding-edge technology (e.g. FTTH). Whereas in the UK, BT was/is obsesse…

One of the things that really helped is that all passive telecommunications infrastructure is by law "common use" - so things like ducts, pipe work, man holes, poles, etc can be used by any company. This has really helped to level the playing field so a single company doesn't have an unfair monopoly because it was there first ( cough BT cough ). Where I'm living right now cable and DSL was available (maybe up to 50mb…

Where I live in the states, telephone pole access is "common use" but the bureaucracy around actually being able to do so makes it pretty much impossible to add new lines (eg: needing to get a expensive environmental review for adding a wire to a pole that already has wires). Last I checked it took about a dozen permits which took ~12-24 months to get. After you got the permits, you then needed to pay for the inspection and full replacement of any poles found to be old/substandard that you wanted to attach to.

Re: Is your internet up to date?

#63

Post by a_brawling_boo »

ubertaco wrote: post #50
qubitcoder wrote: post #49

Earlier quoted context omitted.

For what it's worth, I'm getting 1,000Mbps with AT&T Fiber for $75 a month. I'm located just an hour northwest of Atlanta, in Rome, Georgia.

Over in Cherokee County, meanwhile, it's $70/mo with Comcast for 75Mbps. I was hopeful for a Google Fiber rollout when they announced it, but no dice.

I don't think that Google is expanding any further in the atlanta market, but I am in Kennesaw, and have AT&T fiber which is pretty decent.

Re: Is your internet up to date?

#64

Post by ycmbntrthrwaway »

hannob wrote: post #4

Wow, this is terribly misleading DNSSEC propaganda. It tells me: "Protected from redirection to false IP addresses (DNSSEC)" What does that mean? It means that whatever other DNS server I use seems to verify DNSSEC signatures (I use Google's DNS fwiw). Yet this doesn't provide any reasonable sense of protection, as the connection to that DNS server may very well be compromised. This would very well show DNSSEC protec…

In my case it falsely report that everything is ok because I have uMatrix enabled, which prohibits outside requests. When I disable it, it shows "not protected".

Re: Is your internet up to date?

#65

Post by feld »

tbrownaw wrote: post #61
hannob wrote: post #23

Earlier quoted context omitted.

Congratulations, you've understood the main hole of dnssec. The thing is: you can verify dnssec on the client. In theory. It's just that 99,9% (rough estimate, may be higher) of people don't. You'd have to run your own resolver. Which might work, if your ISP isn't doing funny things with your DNS traffic. Which some ISPs do. Which means it can't be deployed widely. This thing was built in the 90s when people assumed…

What do you mean, "run your own resolver"? That's a fancy name for the library that the application uses to speak DNS, not a separate thing that has to be set up, run, etc, separately.

Instead of asking "what IP is Google.com?" to your configured DNS server, you traverse the whole chain. First, you refer to your list of root zones: which servers can answer about .com? Ok, ask them which DNS servers google.com should have. Next, send the request directly to those servers. Now you get a response that you can use.

This chain can get really long depending on the service's DNS configuration. And this whole time every request has to come back DNSSEC signed.

Note that I'm ignoring any caching....

Re: Is your internet up to date?

#66

Post by feld »

Meanwhile irssi just removed support for DANE in the irc client which I believe means that there are now zero irc clients that will attempt to validate you aren't talking to a rogue irc server. Wasn't irssi the first and only to implement it?

DNSSEC is dead on arrival. Nobody actually wants it.

Re: Is your internet up to date?

#67

Post by [deleted] »

feld wrote: post #65
tbrownaw wrote: post #61

Earlier quoted context omitted.

What do you mean, "run your own resolver"? That's a fancy name for the library that the application uses to speak DNS, not a separate thing that has to be set up, run, etc, separately.

Instead of asking "what IP is Google.com?" to your configured DNS server, you traverse the whole chain. First, you refer to your list of root zones: which servers can answer about .com? Ok, ask them which DNS servers google.com should have. Next, send the request directly to those servers. Now you get a response that you can use. This chain can get really long depending on the service's DNS configuration. And this wh…

[deleted]

Re: Is your internet up to date?

#68

Post by dx034 »

icebraining wrote: post #19
dx034 wrote: post #9

Earlier quoted context omitted.

I use Virgin Media and have no problems on any of my devices. Downlink can be a bit slower at busy times, but I guess that's nature of cable internet and uplink is always at the limit. And I really like that they very rarely change IP addresses (have mine for at least 3 months now). I have the feeling that Sky has slightly better peering (more stable speed to US & Asia during peak hours), but the higher speed on VM i…

IF you mean missing availability of ipv6, I don't think that there are any pages you can't see on ipv4? And there won't be while ISPs are lagging in their adoption, meaning nobody can set up a IPv6-only site if they expect to be accessible by everyone. Also, there's more than sites: an IPv4-only client can't connecting directly (P2P) to other clients behind carrier-grade IPv4 NAT, which leads to more centralized syst…

I know that NATs were not designed as security features, but I'm not sure if we want to have every device out there to have an IP address without NAT. I think that this would bear massive potential for botnets to take over older machines. And replacing NATs with firewalls would ultimately lead to the same problem with P2P.

It's unfortunate for people with more technical knowledge, but most people don't have that, and there is point protecting them from attacks (even if it's their fault that they didn't update).

Re: Is your internet up to date?

#69

Post by zeristor »

icebraining wrote: post #19
dx034 wrote: post #9

Earlier quoted context omitted.

I use Virgin Media and have no problems on any of my devices. Downlink can be a bit slower at busy times, but I guess that's nature of cable internet and uplink is always at the limit. And I really like that they very rarely change IP addresses (have mine for at least 3 months now). I have the feeling that Sky has slightly better peering (more stable speed to US & Asia during peak hours), but the higher speed on VM i…

IF you mean missing availability of ipv6, I don't think that there are any pages you can't see on ipv4? And there won't be while ISPs are lagging in their adoption, meaning nobody can set up a IPv6-only site if they expect to be accessible by everyone. Also, there's more than sites: an IPv4-only client can't connecting directly (P2P) to other clients behind carrier-grade IPv4 NAT, which leads to more centralized syst…

Perhaps only test pages:

http://ipv6.google.com/

Re: Is your internet up to date?

#70

Post by zeristor »

phicoh wrote: post #40
janvha wrote: post #29

The number of websites unreachable for not having IPv6 equals 0, so saying your internet is not "up to date" because you don't have IPv6 doesn't mean much

Two things. First, it is nice if you don't have to allocate ports on a NAT box to make a test system available. These days you can't really count on all non-production systems having public IPv4 addresses anymore. Obviously that only works if all systems that need access have IPv6. However, the main killer app for IPv6 is your ISP running out of IPv4 addresses. Carrier grade NAT boxes are expensive and introduce all…

It appears that Google is seeing 16% ipv6 traffic at the moment, it was 10% a year ago, and 5% the year before that; so not quite on the Ogive climb.

Mind you on a country by country basis Belgium has cleared 50% with Greece clearing 30%.

Heartening to see Zimbabwe pass 7%, an anomaly for the whole of Africa, does anyone know whats going on there? Egypt is second with 0.50%.

The map isn't set up for the Caribbean, although if you check the json used for the website Trinidad comes is at 12%. An egregious omission .

https://www.google.com/intl/en_ALL/ipv6/statistics/data/worl...

Perhaps I need to start a fantasy ipv6 migrarion website...

Post reply on HN