[ISN] Dot-org zone offers lessons learned in implementing DNSSEC

From: InfoSec News <alerts_at_private>
Date: Fri, 7 Aug 2009 03:25:22 -0500 (CDT)
http://gcn.com/articles/2009/08/06/dnssec-lessons-from-.org-050609.aspx

By William Jackson
GCN.com
Aug 06, 2009

Federal agencies are working with the Internet community to develop a 
process for securing the Internet’s Domain Name System by implementing 
the DNS Security Extensions (DNSSEC) in the authoritative root zone. The 
zone for the .org top level domain was signed with DNSSEC in June, and 
its operators have offered their insights to government planners.

In a July 17 letter to the National Telecommunications and Information 
Administration, Afilias Ltd. offered advice on protocols for minimizing 
computational overhead; processes for rolling over, distributing and 
securing cryptographic signing keys; and warned of a possible increase 
in bandwidth demand when DNSSEC is being used.

Afilias provides technical services to .org, the Internet’s largest 
signed zone, on behalf of the Public Interest Registry.

“Our recent DNSSEC deployment has garnered valuable insight into the 
trials and tribulations of running a large signed zone that receives 
billions of queries a day,” Afilias said in offering comments on NTIA’s 
proposed testing and implementation requirements for DNSSEC in the root 
zone.

[...]


__________________________
Subscribe to InfoSec News
http://www.infosecnews.org 
Received on Fri Aug 07 2009 - 01:25:22 PDT

This archive was generated by hypermail 2.2.0 : Fri Aug 07 2009 - 01:29:47 PDT