DNSSEC support for Windows Server 2008 R2 and Windows 7
One of the novelties of Windows 7 and Windows Server 2008 R2 (the "7 Windows Server") is the support for DNS Security Extensions (DNSSEC), as described in RFC 4033, 4034 and 4035. This support will be present both in the DNS server for Windows Server 2008 R2 as the client (DNS stub solving) present in both these versions of Windows.
The DNSSEC allows both servers as customers can validate the responses received in their queries to DNS. The validation prevents attacks in many cases of forgery of DNS records, such as cache poisoning, and are the definitive answer to vulnerabilities such as flaw discovered last year by Dan Kaminski and patched in bulletin MS08-037.
[Please note that DNSSEC is not a protection against other types of attacks, especially those where the server or the client have been committed mainly by malware. Here in Brazil we had in the media assertions about DNSSEC improving security in banking transactions made via the Internet, which is highly questionable (to say the least) given the way the frauds are currently made in the country.]
Source- MS security brazil team blog
Leave your response!