[Dnssec-deployment] Created tutorial page - Re: DNSSEC Validator for Chrome

[Mohan Parthasarathy]

As noted below in your site, this tells the user:

 "The name was resolved securely but your connection may be hijacked"

Or is it that connection hijacking is less common than DNS spoofing
and hence still has some value in telling the user that the name has
been validated using DNSSEC. If the connection was hijacked and the
name is DNSSEC validated, it might be communicating the wrong thing to
the user ?

-mohan


On Wed, Jan 18, 2012 at 6:19 AM, Dan York <york at isoc.org> wrote:
> Ondřej,
>
> That's awesome!  Thanks for passing along the news and I've added a page
> about the extension to our Deploy360 site at:
>
> http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/
>
> Previously I had added a page on the Firefox extension:
>
> http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/
>
> Although after I had posted that page there was an ensuing discussion in
> multiple different channels about what the best user experience for DNSSEC
> really is.  I tried to capture those discussion points in this blog post:
>
> http://www.internetsociety.org/deploy360/blog/2012/01/what-is-the-correct-user-experience-for-dnssec-in-a-web-browser/
>
> Again, as a Chrome user I have to say THANKS for creating the extension and
> I look forward to seeing how it evolves. (and hopefully Chrome will add the
> missing API at some point).
>
> Regards,
> Dan
>
> --
> Dan York
> Senior Content Strategist, Internet Society
> york at isoc.org   +1-802-735-1624
> Jabber: york at jabber.isoc.org
> Skype: danyork   http://twitter.com/danyork
>
> http://www.internetsociety.org/deploy360/
>
> On Jan 18, 2012, at 3:03 AM, Ondřej Surý wrote:
>
> Dear all,
>
> we have just launched first preview version of DNSSEC Validator
> for Chrome[1].  It's not feature complete yet, the main thing missing
> is check if the IP addresses in the browser match (because of
> missing API for that in Chrome).  So it's more eyecandy than security
> now, but we have already asked for such API and we hope to add
> this functionality as soon as needed API hits the browser.
>
> 1. http://labs.nic.cz/page/990/rozsireni-dnssec-validator-pro-google-chrome/
>
> Regards,
> --
> Ondřej Surý
> vedoucí výzkumu/Head of R&D department
> -------------------------------------------
> CZ.NIC, z.s.p.o.    --    Laboratoře CZ.NIC
> Americka 23, 120 00 Praha 2, Czech Republic
> mailto:ondrej.sury at nic.cz    http://nic.cz/
> tel:+420.222745110       fax:+420.222745112
> -------------------------------------------
>
>