Donate
‹ Back
Deploy360 10 October 2012

21 Sites You Can Use To Test DANE Support (DNSSEC + SSL/TLS)

Dan York
By Dan YorkDirector, Online Content

Have you been working on an application that uses the new DANE protocol to combine the encryption of SSL/TLS with the strong integrity protection of DNSSEC? Have you been looking for a way to test your application with a variety of different test cases? If so, we’ve started compiling a list of sites that are currently publishing the TLSA records used by DANE. You can find the list at:

http://www.internetsociety.org/deploy360/resources/dane-test-sites/

As you’ll see on that page, we currently have sites listed for the following protocols and situations:

  • HTTP – Valid TLSA Record With Valid CA-signed TLS Certificate
  • HTTP – Valid TLSA Record With Valid Self-signed TLS Certificate
  • HTTP – Valid TLSA Record With Invalid CA-signed TLS Certificate
  • HTTP – Invalid TLSA Record
  • HTTP – Valid TLSA Record With Invalid DNSSEC Signature
  • SMTP
  • XMPP/Jabber

If you are currently publishing TLSA records, please do let us know and we’ll be glad to add your site to the list. In these early days we’d like to make it as easy as possible for developers to find sites with which they can test their apps.

Thanks – and we’re looking forward to seeing the wide deployment of DANE enabling a much more secure Internet!

‹ Back

Disclaimer: Viewpoints expressed in this post are those of the author and may or may not reflect official Internet Society positions.

Related articles

Hash-slinger Helps You Easily Create TLSA records for DNSSEC / DANE
Deploy36030 November 2012

Hash-slinger Helps You Easily Create TLSA records for DNSSEC / DANE

If you are looking to get started with the DANE protocol to provide higher security for SSL/TLS certificates, a basic...

NIST Offers New Tool To Verify TLSA Records For DANE / DNSSEC
Deploy36021 February 2014

NIST Offers New Tool To Verify TLSA Records For DANE / DNSSEC

Are you experimenting with using the DANE protocol to provide an additional layer of security to your TLS/SSL certificates via...

Weekend Project: Install The DNSSEC/TLSA Validator for Chrome, Firefox, more
Deploy3601 February 2014

Weekend Project: Install The DNSSEC/TLSA Validator for Chrome, Firefox, more

How do you know if a website has a domain signed by DNSSEC?  Here's another quick weekend project, very similar...

Join the conversation with Internet Society members around the world