6111 - DNSSEC, DANE, DPRIVE... Oh My! A Primer on the Critical State of DNS Security (Dan York)

[danyork]

This morning at 9:00am, I'll be talking about DNS security, the value of DNSSEC, what DANE can bring to TLS/SSL certificates and some of the new work that's happening around DNS privacy.

My slides may not yet be available for download (I finalized them yesterday with some new info) but they will be posted and perhaps I can update this topic with the link when they are.

I have a good number of links scattered throughout the presentation, but I'll give you a couple of links here to get started:

Internet Society Deploy360 Programme DNSSEC info:

• https://www.internetsociety.org/deploy360/dnssec/

The State of DNSSEC Deployment 2016

• https://www.internetsociety.org/resources/doc/2016/state-of-dnssec-deployment-2016/

DANE information:

• https://www.internetsociety.org/resources/deploy360/dane/

ICANN's page about the Root KSK Roll (critical date of October 11):

• https://www.icann.org/kskroll

DNS Privacy site:

• https://www.dnsprivacy.org/

I do welcome any questions or feedback about the presentation. You can contact me directly on email at york@isoc.org or leave questions here.

Thanks for your interest in securing the critically important DNS layer of the Internet!

[danyork]

Just an update that later in the day on September 27, ICANN announced that the Root KSK Rollover would be postponed from October 11 to some unspecified date. I wrote about this on the Internet Society blog at:

https://www.internetsociety.org/blog/2017/09/icann-postpones-dnssec-root-ksk-rollover-october-11-wil...

Subsequently, Duane Wessels from Verisign wrote in more detail about the decision:

http://www.circleid.com/posts/20170929_a_closer_look_at_postponing_of_root_zone_ksk_rollover_decisio...

The place to watch further developments will be:

https://www.icann.org/kskroll/