{_}See the_ _[Spaces Instructions|http://middleware.internet2.edu/docs/internet2-spaces-instructions-200703.html]_ _for editing access._

This SIG is intended as a collaborative forum for the research and education community, to share information and support each other in deploying DNSSEC - the Domain Name System Security Extension.

Upcoming Events of Interest

• Internet2 Spring Member Meeting
  April 26-28, 2010, Arlington VA
  DNSSEC BoF (date & time TBD)

Past Events of Interest

• Winter 2010 ESCC/Internet2 Joint Techs
  January 31 - February 4, 2010
  • EDU DNSSEC Testbed
  • DNSSEC on Campus
  • DOE National Labs DNSsec Rollout Experiences

Articles of Interest

• Problems related to key rollover (Feb 2010)
  George Michaelson, Patrik Wallström, Roy Arends, Geoff Huston

Useful Links

• The DNSSEC Deployment Initiative works to encourage all sectors to voluntarily adopt security measures that will improve security of the Internet's naming infrastructure, as part of a global, cooperative effort that involves many nations and organizations in the public and private sectors. The U.S. Department of Homeland Security Science and Technology (S&T) Directorate provides support for coordination of the initiative. This site is a tremendous reference resource.
• Internet Systems Consortium, Inc. (ISC)
  • BIND (Berkeley Internet Name Domain) is an open-source software implementation of the DNS protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications.
  • ISC's DLV Registry
    DLV (DNSSEC Look-aside Validation) is an extension to the DNSSECbis protocol. It is designed to assist in early DNSSEC adoption by simplifying the configuration of recursive servers. DLV provides an additional entry point (besides the root zone) from which to obtain DNSSEC validation information. Without DLV, in the absence of a fully signed path from root to a zone, users wishing to enable DNSSEC-aware resolvers would have to configure and maintain multiple trusted keys into their configuration.
  • SNS@ISC: ISC's DNS Secondary Name Service
    As part of ISC's community outreach and their public benefit mission, in addition to their commercial offering they offer a public-benefit version of SNS@ISC.
• Educause
  • DNSSEC for .edu FAQ
  • DNSSEC Resource List
• Domain Name System RFCs (IETF)