Comcast Migrating Customers To DNSSEC Resolvers

ctg1701 passes along this quote from a Comcast announcement: "Starting today we will begin migrating customers who have opted out of our Domain Helper service over to our production DNSSEC-validating servers. This will happen first in a selected part of our Virginia network, and will later expand to all markets in the following sixty days, at which point all of our customers who have opted out of Domain Helper will be migrated. After this has been completed, we will migrate the rest of our customers, which we anticipate will stretch into the early part of 2011."

Re:migrate

[Anonymous Coward]

My other choice being.... dialup.

Comcast sucks, but it is the only choice for many of us. Competition doesn't work if there isn't any.

Re:What is this?

[popeye44]

Which I am assuming matters not a whit to those of us using OpenDNS.

I've been extremely happy with Opendns so far. "and entirely unhappy with Comcast's opt-out method"

Pitchforks and torches. Nice job, /.

[Caerdwyn]

Chris what is your non-biased take on Comcast forging TCP reset packets and terrible quality HD?

Because guys that run DNS servers are obviously the guys who are responsible for video quality-of-service. Same field, and Comcast has only a couple of engineers running their entire network. I bet Chris also is responsible for designing their logos and what's in their cafeterias and whether the cable installers show up on time.

The topic is DNSSEC, not bandwidth caps or video compression or network traffic filtering.

I would have thought that having a primary source, an engineer relevant to the discussion, was welcome. Instead, it's an excuse to get out the haters. IT guys complain about how they're the ones that take the heat for corporate decisions which they don't control, but the moment it's someone else's IT guy, that person gets the heat for corporate decisions which they don't control. Nice consistency there. What's YOUR company, so we know who YOU are a "shill" for?

I'd be surprised if we hear from Chris again. I know I wouldn't come back. Screw Slashdotters, they don't want information or answers, they want scapegoats and straw men.

Whether Comcast, EFF or the Nazis use DNSSEC is irrelevant to the merits and flaws of DNSSEC. Whether Comcast uses DNSSEC is irrelevant to whether they use ad-readirectors for NXDOMAIN results.

By the way, I think I worked on the DNS server and service that Comcast is using for this, at my previous job. I guess that makes me a shill too. But I'll be damned if I'm going to share anything useful about it, even things that aren't under NDA, to Slashdot.

Re:migrate

[bastion_xx]

Do it the other way around, that's what we've done for our employees. First they order Comcast cable only (any package) if they so desire. Some are on satellite and have opted not to do that. Then you order Comcast Business and tie it to your company but the service address is the employee's house. They are more than happy to do that and the few times we've called them to resolve issues that required a truck roll, the tech wasn't a contractor but an actual Comcast employee who knows the the business service. We have consistent quality and service on 12, 22, and 50 Mb connections. When comparing the lost time and IT staff required to resolve issues when we let home users use the residential services (Cable or HellSouth, err AT&T) to the increased cost of service, it continues to pay for itself.

Re:What is this?

[modmans2ndcoming]

when did Slashdot get populated with a bunch of morons who can't change a freaking router DNS setting?

Re:migrate

[AlamedaStone]

The US should be breaking-up these monopolies, the same way it broke-up the AT&T monopoly.

The US should just nationalize the last mile, treat it as a utility, and avoid all that icky anti-trust litigation.

While I wait for that to happen I'm going to hold my breath until Steve McQueen rides a rainbow-winged pegasus out of my ass.

The reality will probably involve the encroachment of the insurance industry into the ISP realm. You'll need a co-pay to call customer service, and you can only use an ISP from the approved list.

I can't tell whether or not I'm joking.

Re:What is this?

[billcopc]

Dude, I don't even live in the same country, and I'd have modded you down for turning a corporate matter into a personal attack. Comcast is big, and chances are this fellow had no choice but to carry out his orders. If he doesn't do as he is told, a more compliant replacement will be found.

If you hate the company so much, don't take it out on the worker bees, just take your money and go elsewhere. Don't like the alternatives ? Well tough tits, either start your own ISP or STFU. Bitching at a sysadmin will not get you anywhere, at best you will browbeat someone who doesn't deserve your ire, at worst he will mess with your service like any self-respecting BOFH should.

Re:migrate

[commodore64_love]

>>>The US should just nationalize the last mile, treat it as a utility, and avoid all that icky anti-trust litigation.

It can't.

Antitrust legislation is constitutional (says the supreme court), but nationalization of the lines is not. There are limits to what the US Government can do.