New DNSSEC enabled DNS servers are available.

[augie]

The FAQ is here:

https://wiki.sonic.net/wiki/DNSSEC

The highlights are the following:

What is DNSSEC?

DNSSEC is an enhanced level of Internet security that enables validation of DNS traffic to ensure that it has not been tampered with. This prevents hackers from injecting false information (aka DNS cache 'poisoning'), in an attempt to re-direct people trying to access a real website to a fake, phishing or criminal site.

How do I use Sonic.net's DNSSEC enabled recursive servers?

Modify your network connections settings to use the following DNS Server IP addresses:

64.142.73.180
64.142.73.181

These two IP addresses enjoy the same level of redundancy that our standard recursive DNS servers have and employ multiple load balanced clusters at several of our key network POPs.

Any questions or concerns should be directed here to the Forums.

[John Pettitt]

And you haven't signed sonic.net why .... :-)

[dscycler]

Does anyone know how to implement in a server 2008 r2 domain environment running dns with Forwarders set to internet/sonic dns servers? The process looks like it isn't for the feint of heart....

[kgc]

And you haven't signed sonic.net why ....

Adding support for DNSSEC to our authoritative name servers (actually our management software) is next step but I don't think we'll sign sonic.net anytime soon. However, getting support in to our servers for early adopters is something that we might work on.

[jnurthen]

I have been unable to connect to the iTunes store today using the DNSSEC servers.
Switching back to the default DNS servers resolved this.