View Source

See the Spaces Instructions for editing access.

This SIG (Special Interest Group) is intended as a collaborative forum for the research and education community, to share information and support each other in deploying DNSSEC - the Domain Name System Security Extension.

Co-Chairs

Shumon Huque, University of Pennsylvania
Michael Sinatra, University of California, Berkeley

Participation

To subscribe to the e-mail list, send an e-mail to <sympa AT internet2.edu> with the following message in the subject:
- subscribe DNSSEC FirstName LastName
To set a watch on this wiki space, to be notified of changes at the e-mail address in your profile, use the menu at the top of this page:
- Browse => Advanced => Start watching this space (under Subscribe in the left nav)
To edit the e-mail address in your profile, use the menu at the top of this page:
- \[UserName\] => Preferences => Edit Profile (tab)

Upcoming Events of Interest

Internet2 Spring Member Meeting
April 26-28, 2010, Arlington VA
- DNSSEC Panel April 27, 8:45-10:00 AM EST

Past Events of Interest

TF-Mobility
February 18, 2010, Vienna, Austria
- DNSSEC update (pdf)
  Roland van Rijswijk, SURFnet
Winter 2010 ESCC/Internet2 Joint Techs
January 31 - February 4, 2010

Summer 2009 ESCC/Internet2 Joint Techs
July 19 - July 22, 2009
- DNSSEC Deployment at Penn

Articles of Interest

Roll Over and Die? (Problems related to key rollover) (Feb 2010)
George Michaelson, Patrik Wallström, Roy Arends, Geoff Huston
- ISC's Response to Concerns Expressed Around Misconfigured Trust Anchors and Aggressive Validator Behavior

Useful Links

DNSSEC for .edu: Frequently Asked Questions
The DNSSEC Deployment Initiative works to encourage all sectors to voluntarily adopt security measures that will improve security of the Internet's naming infrastructure, as part of a global, cooperative effort that involves many nations and organizations in the public and private sectors. The U.S. Department of Homeland Security Science and Technology (S&T) Directorate provides support for coordination of the initiative. This site is a tremendous reference resource.
DNSSEC.net: a collection of useful information
DNSSEC-Tools: The goal of the DNSSEC-Tools project is to create a set of software tools, patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC related technologies.
EDUCAUSE Resources (.edu Registrar)
- DNSSEC Resource List
- 7 Things You Should Know About DNSSEC(pdf)
IETF
Internet Systems Consortium, Inc. (ISC)
- BIND (Berkeley Internet Name Domain) is an open-source software implementation of the DNS protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications.
- ISC's DLV Registry
  DLV (DNSSEC Look-aside Validation) is an extension to the DNSSECbis protocol. It is designed to assist in early DNSSEC adoption by simplifying the configuration of recursive servers. DLV provides an additional entry point (besides the root zone) from which to obtain DNSSEC validation information. Without DLV, in the absence of a fully signed path from root to a zone, users wishing to enable DNSSEC-aware resolvers would have to configure and maintain multiple trusted keys into their configuration.
- SNS@ISC: ISC's DNS Secondary Name Service
  As part of ISC's community outreach and their public benefit mission, in addition to their commercial offering they offer a public-benefit version of SNS@ISC.
ARIN (American Registry for Internet Numbers) DNSSEC