DynDNS.com update: Insecure...

[Kurt Schumacher]

First, the official service name for DynDNS.org is for a while now DynDNS.com... -> Update Web UI, AG, ...

Appears the dynamic DNS updates (tested with dyndns.com) are making use of the standard http port 80/TCP.  According to https://www.dyndns.com/developers/specs/syntax.html , for a secured communication https on port 443/TCP must be used for updating the service. Without analyting the packets, we can safely say, the RV0xx is using http, bringing your credentials used into a risk by not using a secured communication channel for the dynamic DNS updates.

Somewhat obscure to see none of the Cisco Small Business models from the RV0xx Series (v1 or v2) went to DynDNS.com for compliance certification according to https://www.dyndns.com/support/clients/hardware/ - a strange product placement policy

What happend to the TZO.com DDNS service previously very popular in the Linksys communities? Interesting enough, new NSS3xx Series is supporting TZO, but on the RV015 here, TCO is not available.

Very poor for Cisco.

Back to specs officer, back to product manager, back to RD... 

[ddiep]

>Without analyting the packets, we can safely say, the RV0xx is using http, bringing your credentials used into a risk by not using a secured ...

Will ask design team to also consider https for secure registration/update with dyndns.

>V0xx Series (v1 or v2) went to DynDNS.com for compliance certification ...

I'm not sure if cisco router required the dyndns compliance certification. But will also look into it.

>What happend to the TZO.com DDNS service previously ...

Will take your advice into consideration of adding TZO.com.

Thanks!

[Kurt Schumacher]

>> V0xx Series (v1 or v2) went to DynDNS.com for compliance certification ...

> I'm not sure if cisco router required the dyndns compliance certification. But will also look into it.

Can't find these in the DyndNS.com compatibiity list on http://www.dyndns.com/support/clients/hardware/

Beyond, there are even more Linksys units claimed beeing incompatible, see http://www.dyndns.com/support/clients/noncertified/

>> What happend to the TZO.com DDNS service previously ...

> Will take your advice into consideration of adding TZO.com.

I had to answer the question many times, whyn TZO.com is ot available on replacing Linksys routers and NAS in the past in SMB, SOHO, and home environments.

This is all about building a new reputation for Cisco Small Business - which is certianly not market leading.

The same applies to the insecure DDNS updates. Simply not good enough for our customers.