‹ Back
Deploy360 9 May 2015

DNS-OARC 2015 Spring Workshop This Weekend (May 9-10) Covers DNSSEC and DNS Security

Dan York
By Dan YorkDirector, Online Content

dns-oarcThe 2015 Spring Workshop of the DNS Operations Analysis and Research Center (DNS-OARC) takes place this weekend, May 9-10, right before the RIPE 70 meeting in Amsterdam. As per usual the agenda is packed full of all sorts of sessions related to DNS in general, with a number getting into DNSSEC and overall DNS security.  Here’s the full agenda:


There are currently 137 people scheduled to attended representing a broad range of participants across the DNS community.  I will not be there myself, but know a great number of the people who will be in the room.

Sessions of Interest

Saturday looks to have some great sessions related to operational experience with various attacks against the DNS, including distributed denial of service (DDoS) attacks.  These kind of actual case studies in handling attacks are incredibly useful to get out to the wider community.

Sunday morning begins with a series of DNSSEC-related talks:

  • Observations on DNSSEC and ECDSA in the wild – by Geoff Huston of APNIC
  • Effects of Increasing the Root Zone ZSK Size – by Duane Wessels of Verisign Labs
  • Signing DNSSEC answers on the fly at the edge: challenges and solutions! – by Olafur Gudmundsson of CloudFlare

All of those are ones I’d love to see – I’m hoping there will be a video recording as they start at 9:00 am in Amsterdam… which is 3:00 am here on the US East Coast where I live.  As much as I’d like to see them… well… I can’t see me getting up that early! 🙂

The remainder of Sunday includes a great number of talks that I’d personally find interesting, diving into various tools, analytics, testing and more.  A couple of interest to those focused on DNSSEC include:

  • 14:30 – Plan for Decommissioning the DLV – by Jim Martin of ISC
  • 17:05 – Update on the DNS Root Key Rollover work – by Ed Lewis of ICANN

This last talk, in particular, should be useful to hear the status of the work related to the Root KSK rollover. (See our background page on why this matters.)

Remote Participation

I don’t see any information on the DNS-OARC website right now about remote participation, but the sessions are almost always streamed live.  Given that the event is co-located with RIPE 70, I suspect that they may make use of the RIPE 70 live streaming. I’d watch the RIPE 70 remote participation page or the main 2015 Spring Workshop page for more information.

The good news is that all the materials should be available from links off of the main agenda page, so at least we who are remote should be able to see what slides were discussed.

I also see Stéphane Bortzmeyer is among the attendees and when he is at an event he is usually tweeting out a good bit at https://twitter.com/bortzmeyer, so that’s another way to stay up to date, along with the #DNSOARC hashtag search.

If you are there in Amsterdam, I hope you do have a great DNS-OARC meeting and I look forward to hearing the results.

‹ Back

Disclaimer: Viewpoints expressed in this post are those of the author and may or may not reflect official Internet Society positions.

Related articles

Improving Technical Security 15 March 2019

DNS Privacy Frequently Asked Questions (FAQ)

We previously posted about how the DNS does not inherently employ any mechanisms to provide confidentiality for DNS transactions,...

Improving Technical Security 14 March 2019

Introduction to DNS Privacy

Almost every time we use an Internet application, it starts with a DNS (Domain Name System) transaction to map...

Improving Technical Security 13 March 2019

IPv6 Security for IPv4 Engineers

It is often argued that IPv4 practices should be forgotten when deploying IPv6, as after all IPv6 is a...

Join the conversation with Internet Society members around the world