Want to understand DNSSEC and how it can help secure the Internet?  The folks at SIDN, the registry behind the .NL country code top-level domain (ccTLD), have put together a truly excellent 1-hour video e-learning session available in either English or Dutch at: http://www.dnsseccourse.nl/ The course touches on the basics of DNS then explains the Read more…

Looking for a comprehensive guide to what DNSSEC is all about?  If so, Olaf Kolkman and the team at NLnet Labs have created and maintained for many years now the extremely detailed “DNSSEC HOWTO, a tutorial in disguise.” You can find it at: http://www.nlnetlabs.nl/publications/dnssec_howto/ It is available as both a web page and as a Read more…

In March 2010, the European Network and Information Security Agency (ENISA) issued their “Good Practices Guide For Deploying DNSSEC” with the abstract: Deploying DNSSEC requires a number of security details and procedures to be defined and followed with specific requirements as to timing. This guide addresses these issues from the point of view of information Read more…

How can use DNSSEC if you register your domain name with one registrar, but actually host the DNS records on the name servers of another DNS hosting provider? Or if you host the DNS records on your own name server? As we were putting together our list of DNS registrars and hosting providers supporting DNSSEC, Read more…

Dyn, Inc. provides a simple web interface to enable DNSSEC with the purchase of their DynECT Managed DNS Lite service (or higher levels of service). It is worth noting that Dyn’s primary business is DNS hosting and so while they will certainly register a domain for you the focus of their site and services is Read more…

GoDaddy.com provides an extremely simple web interface to enable DNSSEC with the purchase of their Premium DNS service. GoDaddy’s “Premium DNS” service is currently (January 2012) priced at $2.99/month or roughly $36/year. This will allow you to configure DNSSEC for up to five domains. You can then purchase additional upgrades if you want to enable Read more…

GKG.net supports the use of DNSSEC with regard to registration of domains. You can easily enter Delegation Signer (DS) records and GKG.net will sign those records themselves and communicate them to the parent name servers. While GKG.net does offer a “DNS Hosting” service, at the current time (January 2012) they do not provide any DNSSEC Read more…

Binero is a domain registrar and DNS hosting provider located in Sweden who automatically signs all domains hosted on their service. Currently this is limited to .SE and .EU domains, but they have indicated that they plan to expand this service to other TLDs. Binero’s website is currently only in Swedish but an English version Read more…

With DNSSEC, your domain name registrar plays a critical role in linking your signed domain to the higher-level name servers to form a “chain of trust“. This trust relationship begins at the “root” of the DNS system, then goes to the top-level domains (TLDs) and then to second level domain names (“example.com”) and on from Read more…

The United States National Institute of Standards and Technology (NIST) created an excellent “Special Publication” related to DNSSEC: Secure Domain Name System (DNS) Deployment Guide Like many of NIST’s Special Publications, the 118-page guide, last updated in April 2010, starts out with a tutorial about the basics of the technology, in this case DNS.  It Read more…