With the buzz over Google’s news about DNSSEC yesterday, we’ve seen a large surge of visitors to our DNSSEC-related resources and in the midst of that someone pointed out that the excellent introduction to DNSSEC video from Shinkuro, Inc., was no longer available on YouTube. Given that we work well with the Shinkuro team, we Read more…
How do you get started with deploying DNSSEC-validating DNS servers on your network? What kind of planning should you undertake? What are the steps you need to go through? The team over at SURFnet in the Netherlands recently released an excellent whitepaper that goes into the importance of setting up DNSSEC validation, the requirements for Read more…
Why should you deploy DNSSEC-validating DNS resolvers on your network? What kind of planning should you do to prepare? What steps do you need to do? The team at SURFnet has published a whitepaper titled “Deploying DNSSEC: Validation on recursive caching name servers” (PDF) that answers these specific questions and much more. The document covers: Read more…
Want to understand DNSSEC and how it can help secure the Internet? The folks at SIDN, the registry behind the .NL country code top-level domain (ccTLD), have put together a truly excellent 1-hour video e-learning session available in either English or Dutch at: http://www.dnsseccourse.nl/ The course touches on the basics of DNS then explains the Read more…
Looking for a comprehensive guide to what DNSSEC is all about? If so, Olaf Kolkman and the team at NLnet Labs have created and maintained for many years now the extremely detailed “DNSSEC HOWTO, a tutorial in disguise.” You can find it at: http://www.nlnetlabs.nl/publications/dnssec_howto/ It is available as both a web page and as a Read more…
In March 2010, the European Network and Information Security Agency (ENISA) issued their “Good Practices Guide For Deploying DNSSEC” with the abstract: Deploying DNSSEC requires a number of security details and procedures to be defined and followed with specific requirements as to timing. This guide addresses these issues from the point of view of information Read more…
How can use DNSSEC if you register your domain name with one registrar, but actually host the DNS records on the name servers of another DNS hosting provider? Or if you host the DNS records on your own name server? As we were putting together our list of DNS registrars and hosting providers supporting DNSSEC, Read more…
Dyn, Inc. provides a simple web interface to enable DNSSEC with the purchase of their DynECT Managed DNS Lite service (or higher levels of service). It is worth noting that Dyn’s primary business is DNS hosting and so while they will certainly register a domain for you the focus of their site and services is Read more…
GoDaddy.com provides an extremely simple web interface to enable DNSSEC with the purchase of their Premium DNS service. GoDaddy’s “Premium DNS” service is currently (January 2012) priced at $2.99/month or roughly $36/year. This will allow you to configure DNSSEC for up to five domains. You can then purchase additional upgrades if you want to enable Read more…
GKG.net supports the use of DNSSEC with regard to registration of domains. You can easily enter Delegation Signer (DS) records and GKG.net will sign those records themselves and communicate them to the parent name servers. While GKG.net does offer a “DNS Hosting” service, at the current time (January 2012) they do not provide any DNSSEC Read more…