Internet2 DNSSEC SIG

See the Spaces Instructions for editing access.

This SIG (Special Interest Group) is intended as a collaborative forum for the research and education community, to share information and support each other in deploying DNSSEC - the Domain Name System Security Extension.

Co-Chairs

• Shumon Huque, University of Pennsylvania
• Michael Sinatra, University of California, Berkeley

Mailing List

• To subscribe to the e-mail list, send an e-mail to <sympa AT internet2.edu> with the following message in the subject: subscribe DNSSEC FirstName LastName

Upcoming Events of Interest

• Internet2 Spring Member Meeting
  April 26-28, 2010, Arlington VA
  DNSSEC BoF (date & time TBD)

Past Events of Interest

• Winter 2010 ESCC/Internet2 Joint Techs
  January 31 - February 4, 2010
  • EDU DNSSEC Testbed
  • DNSSEC on Campus
  • DOE National Labs DNSsec Rollout Experiences

• Summer 2009 ESCC/Internet2 Joint Techs
  July 19 - July 22, 2009
  • DNSSEC Deployment at Penn

Articles of Interest

• Roll Over and Die? (Problems related to key rollover) (Feb 2010)
  George Michaelson, Patrik Wallström, Roy Arends, Geoff Huston
  • ISC's Response to Concerns Expressed Around Misconfigured Trust Anchors and Aggressive Validator Behavior

Useful Links

• DNSSEC for .edu - Frequently Asked Questions
• The DNSSEC Deployment Initiative works to encourage all sectors to voluntarily adopt security measures that will improve security of the Internet's naming infrastructure, as part of a global, cooperative effort that involves many nations and organizations in the public and private sectors. The U.S. Department of Homeland Security Science and Technology (S&T) Directorate provides support for coordination of the initiative. This site is a tremendous reference resource.
• DNSSEC.net: a collection of useful information
• http://net.educause.edu/edudomain/show_faq.asp?code=EDUDNSSEC
• EDUCAUSE Resources (.edu Registrar)
  • DNSSEC Resource List
  • 7 Things You Should Know About DNSSEC(pdf)
• IETF
  • Domain Name System Operations (Dnsop) Working Group
  • DNS Extensions (Dnsext) Working Group
  • DNS RFCs
• Internet Systems Consortium, Inc. (ISC)
  • BIND (Berkeley Internet Name Domain) is an open-source software implementation of the DNS protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications.
  • ISC's DLV Registry
    DLV (DNSSEC Look-aside Validation) is an extension to the DNSSECbis protocol. It is designed to assist in early DNSSEC adoption by simplifying the configuration of recursive servers. DLV provides an additional entry point (besides the root zone) from which to obtain DNSSEC validation information. Without DLV, in the absence of a fully signed path from root to a zone, users wishing to enable DNSSEC-aware resolvers would have to configure and maintain multiple trusted keys into their configuration.
  • SNS@ISC: ISC's DNS Secondary Name Service
    As part of ISC's community outreach and their public benefit mission, in addition to their commercial offering they offer a public-benefit version of SNS@ISC.