Page History
SSAC
Briefing on Routing SecurityReport on the Evolution of Internet Name Resolution (R1)
Date Issued | Document | Reference ID | Current Phase | |||||||
---|---|---|---|---|---|---|---|---|---|---|
09 Jun | SSAC Briefing on Routing SecurityReport on the Evolution of Internet Name Resolution (R1) | SAC121SAC123 |
|
Description:
The routing system today is subject to a continuous stream of routing anomalies that affect its integrity and that sometimes cause large DNS outages. For example, in April of 2018 attackers were able to “hijack” routes to Amazon’s Route53 DNS services, which resulted in DNS traffic for domains hosted on this service ending up at a different destination network where it was served by malicious DNS servers.
In this report, the SSAC discusses events like these and what impact similar incidents can have on the DNS, surveys the pros and cons of various solutions, and discusses future security extensions of the routing system (e.g., path validation). The main focus of this report is on the security and stability implications for the DNS, although most of it also applies to other types of Internet applications (e.g., email, web, media streaming)SSAC recommends that the ICANN organization continue to track and provide regular updates to the ICANN Board and community on both alternative protocols that make use of the domain namespace, and efforts to create mitigations and reduce risks inherent in the coexistence of multiple namespaces and protocols.
The SSAC recommends that the ICANN organization continue to keep the ICANN community abreast of new developments through such means as the Emerging Identifier Technologies panels that have been presented at a number of ICANN meetings.
STATUS UPDATES
Date | Phase | Type | Status Updates | |||||||
---|---|---|---|---|---|---|---|---|---|---|
| Closed | Phase Change | This Advice Item is now Closed | |||||||
22 2022 | Phase 12 | Phase Update | The ICANN Board sent a letter (https://www.icann.org acknowledged receipt of SAC121 and notified SSAC it will be closed immediately./en/system/files/correspondence/sinha-to-mohan-03jun24-en.pdf) to the SSAC regarding this Advice item. | |||||||
| Phase 2 | Phase Update | ICANN received SAC123, acknowledged, and is currently reviewing | |||||||
| Phase 2 | Phase Change | Now in Phase 2: Understand | |||||||
| Phase 1 | Phase Update | ICANN understands SAC121 is the SSAC's briefing report on routing security of the DNS. As there is no action for the ICANN Board, this item will be considered closed.acknowledged receipt of Advice SAC123 | |||||||
| Phase 1 | Phase Change | Now in Phase 1: Receive & Acknowledge | |||||||
| Phase 1 | Phase Update | SSAC published | SAC121SAC123: SSAC | Briefing on Routing Security.Report on the Evolution of Internet Name Resolution Link: https:// | wwwitp.cdn.icann.org/en | /system/files/ | filessecurity-and-stability-advisory-committee-ssac-reports/sac- | 121123-15-12-2023-en.pdf | .