cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Showing results for 
Search instead for 
Did you mean: 
Viewer

6111 - DNSSEC, DANE, DPRIVE... Oh My! A Primer on the Critical State of DNS Security (Dan York)

This morning at 9:00am, I'll be talking about DNS security, the value of DNSSEC, what DANE can bring to TLS/SSL certificates and some of the new work that's happening around DNS privacy.

 

My slides may not yet be available for download (I finalized them yesterday with some new info) but they will be posted and perhaps I can update this topic with the link when they are.

 

I have a good number of links scattered throughout the presentation, but I'll give you a couple of links here to get started:

 

Internet Society Deploy360 Programme DNSSEC info:

The State of DNSSEC Deployment 2016

DANE information:

ICANN's page about the Root KSK Roll (critical date of October 11):

DNS Privacy site:

I do welcome any questions or feedback about the presentation. You can contact me directly on email at york@isoc.org or leave questions here.

Thanks for your interest in securing the critically important DNS layer of the Internet!

 

--
Dan York, CISSP, Internet Society
york@isoc.org @danyork
1 Reply
Viewer

Re: 6111 - DNSSEC, DANE, DPRIVE... Oh My! A Primer on the Critical State of DNS Security (Dan York)

Just an update that later in the day on September 27, ICANN announced that the Root KSK Rollover would be postponed from October 11 to some unspecified date. I wrote about this on the Internet Society blog at:

 

https://www.internetsociety.org/blog/2017/09/icann-postpones-dnssec-root-ksk-rollover-october-11-wil...

 

Subsequently, Duane Wessels from Verisign wrote in more detail about the decision:

 

http://www.circleid.com/posts/20170929_a_closer_look_at_postponing_of_root_zone_ksk_rollover_decisio...

 

The place to watch further developments will be:

 

https://www.icann.org/kskroll/

--
Dan York, CISSP, Internet Society
york@isoc.org @danyork