Threat of the month: P2P DNS
P2P DNS
What is it?
P2P DNS is the latest proposal for an alternative Domain Name System (DNS) service, one that strives to replace ICANN as the authority. The concept is not new but has gained momentum recently.
How does it work?
The basic premise is to decentralize DNS records across nodes of a peer-to-peer (P2P) network, whereby each node would be able to resolve domain names without the need to contact the root DNS servers controlled by ICANN. The primary objective is to eliminate government control over the root domain servers. This has the potential to be a disruptive force and increase exposure to threats.
How can I prevent it?
P2P DNS does not yet exist. However, it is something we must be prepared to address. DNS resolution is a powerful security control that relies on trust in ICANN. Many corporations, ISPs and security products use DNS filters to protect against unauthorized content. Control over which DNS services are used can be aided through egress filtering and host level policy.
–
