Tools

The Case for DNSSEC, DANE & Root Key Rollover @ APRICOT 2017

Our colleague Jan Žorž from the Deploy360 team was asked to present during the DNS/DNSSEC sessions during APRICOT 2017 last week, and this provides us with the opportunity to highlight a few of the other presentations there. If you need to make the technical and/or business case for deploying DNSSEC, then you can do worse than check out the excellent Read more…


Join the DNS Security team at the IETF 96 Hackathon this weekend…

IETF 96 Hackathon

If you will be in Berlin, Germany, this weekend and are interested in putting your coding or documentation skills to good use in helping make DNS more secure, please plan to join a group of about 20 of us at the IETF 96 Hackathon who will be working on DNS-related projects. The Hackathon is at the Read more…


July 13th, 2016 by | Posted in Developers, DNSSEC, IETF, Tools | Tags: , , , | 1 Comment

Let’s Encrypt certificates tested in go6lab

Since the announcement of the Let’s Encrypt project, we’ve been enthusiastic about the idea of having an open and transparent Certification Authority (CA) that could show other CA’s that it’s possible to run a certificates business and keep it free for everyone! So, after the Closed Beta programme was announced, we managed to get involved and secure our web Read more…


Videos And Slides Available From ICANN 54 DNSSEC Workshop

ICANN 54 logo

If you are interested in learning more about the current state of DNSSEC and DANE technologies, tools and deployment, the slides and videos are now available from the ICANN 54 DNSSEC activities that happened this month in Dublin, Ireland. The first session was the “DNSSEC For Everybody: A Beginner’s Guide” that includes a skit where Read more…


October 30th, 2015 by | Posted in DANE, DNSSEC, Events, Tools | Tags: , , , | No Comments

What We Learned: DNSSEC KSK Rollovers in go6lab

The short story: A KSK rollover on the OpenDNSSEC platform is easy and you should not be scared of it. The longer story: A little over a year ago, we decided in the Go6lab to start learning DNSSEC by doing it, so we set up OpenDNSSEC for signing domains and followed this excellent deployment document, written for Read more…


October 6th, 2015 by | Posted in DNSSEC, Tools | Tags: | No Comments

Are You Protected By DNSSEC? A Quick Way To Check

Thumbs Up

Want a quick way to check if you have DNSSEC validation working at your site? Just go to: https://www.dnssec-tools.org/test/ You’ll see either a thumbs-up or a thumbs-down:   If you get a thumbs-up then all the DNS queries were validated with DNSSEC.  If you get a thumbs-down then your local DNS resolver is either not Read more…


January 2nd, 2015 by | Posted in DNSSEC, Tools | Tags: , | No Comments

Video: BIND and DNSSEC – What Is New?

Video interview

How does BIND work with DNSSEC? How easy is it to configure? What new features does it have that makes DNSSEC signing simple? How does it work as a DNSSEC-validating resolver? To answer these questions, I interviewed Eddy Winstead about BIND and what it can do with DNSSEC. We discussed BIND’s features as well as new training Read more…


November 7th, 2014 by | Posted in DNSSEC, Tools, Videos | Tags: , , , , | No Comments

Case Study: The Experience of Signing Go6.SI with DNSSEC

Some time ago Matthijs Mekking, one of the authors, maintainers and coders for the OpenDNSSEC project asked me why go6.si domain was not signed. My answer was that I need a short, precise and deployment/operations-oriented document with clearly described steps on how to setup the signing platform, how to add a zone and sign it. Matthijs Read more…


October 30th, 2014 by | Posted in Case Studies, DNSSEC, Tools, Tutorials, Whitepapers | Tags: , | 1 Comment

Fedora 21 To Have DNSSEC Validation Enabled By Default

Fedora logo

By way of a recent tweet from Red Hat’s Paul Wouters we learned the great news that the next release (21) of the Fedora operating system will include a DNSSEC-validating DNS resolver enabled by default.  According the Fedora 21 release schedule, if all goes according to plan Fedora 21 should be generally available in October Read more…


May 2nd, 2014 by | Posted in DNSSEC, Tools | Tags: , , | No Comments

Weekend Project: Try Out “Bloodhound”, A Web Browser With Full DNSSEC Support

bloodhound

Here is a quick project to try out this weekend… download and try out the Bloodhound web browser from the DNSSEC Tools Project. This web browser is a modified version of Mozilla Firefox that supports local validation of DNSSEC and also usage of the DANE protocol.  The cool part about Bloodhound is that it validates ALL web Read more…


March 15th, 2014 by | Posted in DNSSEC, Tools, Weekend Projects | Tags: , , , | No Comments