The Threat Behind the Current DNS System — EXIP for Revival!

Exip
3 min readAug 24, 2021

--

Today, the DNS system is recognised as the backbone of the internet and mission-critical infrastructure that no organization can function without. However, despite growing investment in network and information security, the DNS system has few security safeguards and remains vulnerable to mounting severe challenges.

The biggest concern for DNS administrators is security; how to handle the various exploits, misconfigurations and distributed denial-of-service (DDoS) attacks that occur. Two main security threats that exist for the DNS system are query/response transactions. Attackers can spoof authoritative name servers responding to DNS queries, alter DNS responses in transit through man-in-the-middle attacks, and alter the DNS responses stored in caching name servers. Hackers can exploit these threats to route Internet traffic away from its intended destination to malicious servers.

DNS servers are entirely centralised and operated by a single entity (ICANN), while centralized domain providers own the domains and not the users. This form of centralization is a major vulnerability and poses a grave threat for the internet currently. Furthermore, though many countries have attempted to develop their own domain name systems, a viable global solution has not been found to date.

DNS systems have little privacy. Privacy problems remain with DNS servers themselves, particularly when many users access the same DNS servers. The growing emphasis on protecting the privacy of individual users is also changing the need for security in the DNS space, making it essential to safeguard DNS queries to avoid leaking information about services being accessed.

The solution to decentralize the internet and overcome monopolistic control over domain names and top-level domains (TLDs) lies in EXIP. EXIP as an ecosystem is designed as a blockchain DNS solution which is custom-built according to the needs of any individual, private or government institution.

Users will have the power to create and own their domain or TLD and not rent it from service providers. Even the provisioning of creating new domain names cum subdomains and have complete control of its usage. Neither can their domains be shut down by an external authority. All users will have equal rights to access, and anyone will be able to create domains and TLDs, whose ownership will be identified through non-fungible tokens (NFTs).

Solving the issue of DNS security, EXIP can avoid conventional DNS server attacks and hacks. This is due to EXIP DNS servers being held and hosted by the public, and a single point of attack on a decentralized server is bound to fail.

The community hosts DNS servers as nodes, which can address decentralized domain names locally or in the cloud, acting as a standard DNS server. When a user types a domain name into the search bar, the code looks up the requested name in the EXIP DNS resolvers first, then in the standard DNS server if it is not identified. Anyone can run their nodes by downloading the EXIP node running software package. Users who run nodes will be incentivised with EXIP tokens — The futuristic key to create/own/trade & auction the Domains and Top Level Domains.

EXIP’s holistic approach which aims to provide a blockchain powered, community run, comprehensive DNS solution trusted to be the complete blockade against the hindering threats.

--

--