Thursday, Nov 14, 2024

Archive for November, 2010

What is DNSSEC?

DNS Security Extensions (DNSSEC)

DNS Security Extensions (DNSSEC) was first introduced in the mid-1990s as an additional security measure to protect the DNS from cache poisoning exploits (recently referred to as the Kaminsky bug) which can allow a bad actor to get in the middle of an Internet users’ request to access a Web site without their knowledge. DNSSEC introduces digital signatures to the DNS infrastructure, allowing end users to more securely navigate the Internet. It can provide users with effective verification that their applications, such as Web or email, are using the correct addresses for servers they want to reach.


Afilias and DotAsia collaborate on DNSSEC implementation for .ASIA

.ASIA top-level domain is one of the pioneer domain registries in Asia to enable the secure DNS standard


The History and Value of Deploying DNSSEC

What problem does DNSSEC solve?

When you visit a website, or send an e-mail, can you be sure you are communicating with the server that you think you are?


DNSSEC RFC Standards

The following standards, published in March 2005, specify the core functionality of DNSSEC:

# RFC 4033 – DNS Security Introduction and Requirements
http://www.rfc-archive.org/getrfc.php?rfc=4033

# RFC 4034 – Resource Records for the DNS Security Extensions
http://www.rfc-archive.org/getrfc.php?rfc=4034

# RFC 4035 – Protocol Modifications for the DNS Security Extensions
http://www.rfc-archive.org/getrfc.php?rfc=4035

# RFC 5155 – DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
http://www.rfc-archive.org/getrfc.php?rfc=4310

# RFC 4641 – DNSSEC Operational Practices
http://www.rfc-archive.org/getrfc.php?rfc=4641