You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 103 Next »

See the Spaces Instructions for editing access.

This SIG (Special Interest Group) is intended as a collaborative forum for the research and education community, to share information and support each other in deploying DNSSEC - the Domain Name System Security Extension.

NOTE WELL: All Internet2 Activities are governed by the Internet2 Intellectual Property Framework.

Co-Chairs

  • Shumon Huque, University of Pennsylvania
  • Michael Sinatra, University of California, Berkeley

Participation

  • To subscribe to the e-mail list, send an e-mail to <pubsympa AT internet2.edu> with the following message in the subject:           
    • subscribe DNSSEC FirstName LastName
  • To set a watch on this wiki space, to be notified of changes at the e-mail address in your profile, use the menu at the top of this page:
    • Browse => Advanced => Start watching this space (under Subscribe in the left nav)
  • To edit the e-mail address in your profile, use the menu at the top of this page:

    • [UserName] => Preferences => Edit Profile (tab)

.edu Production DNSSEC-enabled Zones

Information obtained from SecSpider - the DNSSEC Monitoring Project as of 8-June-2011

.edu DNS domain statistics NEW

A compilation of DNS capabilities of a selected set of EDU institutional domain names (specifically most of the organizations that are members of Internet2). The data displayed on this page are currently updated once per day.

Upcoming Events of Interest

Past Events of Interest

Articles of Interest

  • ARIN (American Registry for Internet Numbers) DNSSEC

  • Comcast DNSSEC Information Center (How to Participate in the [Comcast] DNSSEC Trial Today...)

  • DNSSEC for .edu: Frequently Asked Questions
  • DNSCheck - Test your DNS-server and find errors (includes DNSSEC)
  • The DNSSEC Deployment Initiative works to encourage all sectors to voluntarily adopt security measures that will improve security of the Internet's naming infrastructure, as part of a global, cooperative effort that involves many nations and organizations in the public and private sectors. The U.S. Department of Homeland Security Science and Technology (S&T) Directorate provides support for coordination of the initiative. This site is a tremendous reference resource.
  • DNSSEC Links at Internet2 member institutions
  • DNSSEC.net: a collection of useful information
  • DNSSEC Industry Coalition - a global group of registries and industry experts whose mission is to work collaboratively to facilitate adoption of Domain Name Security Extensions (DNSSEC) and streamline the implementations across Domain Name Registries. Members work together to establish a consistent set of tools and applications, shared best practices, specifications and shared nomenclature. DNSSEC Industry Coalition members include both generic Top-Level Domain and country code Top-Level Domain registries along with industry and educational experts of the Domain Name System.
  • DNSSEC-Tools: The goal of the DNSSEC-Tools project is to create a set of software tools, patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC related technologies.
  • DNSViz - A DNS visualization toolDNSViz is a tool for visualizing the status of a DNS zone. It was designed as a resource for understanding and troubleshooting deployment of the DNS Security Extensions (DNSSEC). It provides a visual analysis of the DNSSEC authentication chain for a domain name and its resolution path in the DNS namespace, and it lists configuration errors detected by the tool.
  • EDUCAUSE Resources (.edu Registrar)
  • IETF
  • Internet Systems Consortium, Inc. (ISC)
    • BIND (Berkeley Internet Name Domain) is an open-source software implementation of the DNS protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications.
    • ISC's DLV Registry
      DLV (DNSSEC Look-aside Validation) is an extension to the DNSSECbis protocol. It is designed to assist in early DNSSEC adoption by simplifying the configuration of recursive servers. DLV provides an additional entry point (besides the root zone) from which to obtain DNSSEC validation information. Without DLV, in the absence of a fully signed path from root to a zone, users wishing to enable DNSSEC-aware resolvers would have to configure and maintain multiple trusted keys into their configuration.
    • SNS@ISC: ISC's DNS Secondary Name Service
      As part of ISC's community outreach and their public benefit mission, in addition to their commercial offering they offer a public-benefit version of SNS@ISC.
  • NIST DNSSEC Project
  • OpenDNSSEC - Open Source software created as an open-source turn-key solution for DNSSEC. It secures zone data just before it is published in an authoritative name server.
  • Review of administrative tools for DNSSEC
    During the spring of 2010 .SE together with Certezza has conducted a second review of administrative tools for DNSSEC, this time including three new vendors, making a total of eight. ...The products have been divided into five DNS servers and three pure DNSSEC signers. We conclude that the quality of at least six of the management tools is good enough for convenient deployment. Some features is missing from most of the products, including support for signing several zones with a shared key and standardized key migration.
  • Root DNSSEC - Information about DNSSEC for the Root Zone
  • TERENA TF-Mobility DNSSEC Working Group
    (Trans-European Research and Education Networking Association - Task Force on Mobility)
  • No labels