dnssec and the pracce safe dns campaign - icann gnso · dnssec and the pracce safe dns campaign...

DNSSEC and the Prac0ce Safe DNS campaign Lance Wolak Vice President, Marke0ng & Sales .ORG, The Public Interest Registry ICANN December 2010

Upload: others

Post on 27-Jun-2020

13 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Page 1: DNSSEC and the Pracce Safe DNS campaign - ICANN GNSO · DNSSEC and the Pracce Safe DNS campaign Lance Wolak Vice President, Markeng & Sales .ORG, The Public Interest Registry ICANN

DNSSECandthePrac0ceSafeDNScampaign

LanceWolakVicePresident,Marke0ng&Sales.ORG,ThePublicInterestRegistry

ICANN

December2010

  Launched in October .

Page 3: DNSSEC and the Pracce Safe DNS campaign - ICANN GNSO · DNSSEC and the Pracce Safe DNS campaign Lance Wolak Vice President, Markeng & Sales .ORG, The Public Interest Registry ICANN

Target Audiences

» Domain holders » Registrars » Operating systems »  ISPs » Router companies » Web developers

Page 4: DNSSEC and the Pracce Safe DNS campaign - ICANN GNSO · DNSSEC and the Pracce Safe DNS campaign Lance Wolak Vice President, Markeng & Sales .ORG, The Public Interest Registry ICANN

Join the Campaign » More than1,500 visitors and 3,000 videos downloaded » Long term long campaign » More experts to be featured on practicesafedns.org

(We are video recording today at 4pm)

ABC DNSSEC Practice Statement (DPS) - ICANN · ABC DNSSEC Practice Statement (DPS) ... 2.2 Publication of key signing keys (KSK) ... 4.3.3 Training requirements

DNSSEC for the Root Zone · 2014. 7. 10. · Draft Timeline • December 1, 2009 ‣ Root zone signed • Initially signed zone stays internal to ICANN and VeriSign ‣ ICANN and

DANE & Application Uses of DNSSEC - ICANN | …...DANE & Application Uses of DNSSEC! Shumon Huque, Duane Wessels! ICANN 52, Singapore, Singapore! February 11th, 2015! Verisign Public!

DNSSEC Deployment: Where We Are - ICANN · DNSSEC: We have passed the point of no return • Fast pace of deployment at the TLD level • Stable deployment at root Inevitable widespread

AEP Netwrorks Keyper HSM & ICANN DNSSEC

DNSSEC Workshop - ICANN

DNSSEC: A Vision - ICANN

ABC DNSSEC Key Ceremony Scripts - ICANN Master of Ceremonies Participants Instructions: At the end of the ceremony, participants print name, citizenship, signature, date

DANE Demonstration - ICANN | Archives · 2017-04-14 · DANE Demonstration! Duane Wessels, Verisign! ICANN 49 DNSSEC Workshop! March 26, 2014!

DNSSEC - Red Hat · DNSSEC . Topics DNSSEC theory in 7 screen shots DNSSEC software: validating, signing Converting applications to use DNSSEC Using DNSSEC for non-DNS purposes TLSA,

DNS Security Tools (DNSSEC-Tools) - ICANN · Dec 7, 2006 [email protected] # Zone Management Tools • Zonesigner – Signs zones in one step – Defaults do the “right thing”

2017 DNSSEC KSK Rollover - LACNICslides.lacnic.net/wp-content/uploads/2017/05/ksk-rollover-icann-v2.pdf · | 4 Rollover of the Root Zone DNSSEC KSK ¤Therehas been one functional,

DNSSEC Exposed - Deploying DNSSEC in Real Life Presentation

Shared ccTLD DNSSEC Signing Platform - ICANN GNSO...1: Sign zone, verify validity on signing system 2: Sign zone, publish on anycast servers, verify distribution and public visibility

ICANN & IPv6‣ Require IPv6 transport on all publicly funded connectivity purchases and create the market. Thank You! ICANN ICANN REGULAR ICANN ICANN ICANN Title EU IPv6 Day 2008

Dominic Stahl Infoblox DNSSEC Solution - DENIC eG: Wir ... · Infoblox DNSSEC Solution simple, secure and reliable Infoblox DNSSEC Solution ... Infoblox DNSSEC Offering:

ICANN Mexico ccTLD Practical DNSSEC - Filip and Hitchcock

DNSSEC for the Root Zone...Root Servers KSK published by ICANN Keyset is signed by KSK and sent back from ICANN to VeriSign Unsigned root 11 Proposed Approach to Protecting the KSK

Improving Source Code Readability: Theory and Pracce

DNSSEC in Practice: Using DNSSEC- Tools to Deploy DNSSEC · DNSSEC in Practice: Using DNSSEC-Tools to Deploy DNSSEC Wes Hardaker. Russ Mundy. Suresh Krishnaswamy {hardaker,mundy,suresh}@sparta.com

DNSSEC ICANN EPP Keyrelay 20130410 - Jouw …...o DNS operators are entities that can have mutliple hat’s (registrars, registrants, resellers, 3th party hosters) that confuses people

Measuring DNSSEC using RIPE Atlas...DNSSEC Workshop, ICANN 51 - October 2014 Measurement Devices RIPE Atlas •v1 & v2: Lantronix XPort Pro •v3: TP-Link TL-MR3020 powered from USB

AFRINIC (r)DNSSEC Infrastructure · AFRINIC (r)DNSSEC Infrastructure...and how we (silently) migrated a signer Amreesh Phokeer [email protected] R&D ICANN-59 (28 June 2017) 1. African

DNSSEC in Windows DNS Server - ICANN | Archives · DNSSEC in Windows DNS Server Microsoft introduced support for DNSSEC in Windows 2008 R2… Ability to sign zones offline and host

DNSSEC Industry Survey Results - PCN, Inc.23.235.200.57/~pcninc5/wp-content/.../DNSSEC-Industry-Survey-Resu… · DNSSEC. DNS administrators can provide secure responses to DNSSEC-validating

Global Domains Division ICANN 51 Update...Text #ICANN51 IANA Department • Priority: Liaison on the IANA Stewardship Coordinating Group (ICG) • 14 August 2014: 18th DNSSEC Key Signing

DNSSEC Workshop - ICANN GNSO...4. DNSSEC Lessons Learned: Roland van Rijswijk, SURFnet 5. DNSSEC Tool Development: • Open Source Tools, Russ Mundy, Co‐Chair, DNSSEC Deployment

Securing DNS Infrastructure Using DNSSEC - ICANN · 2015-09-17 · Securing DNS Infrastructure Using DNSSEC Ram Mohan Executive Vice President, Aﬁlias rmohan@aﬁlias.info February

DNSSEC Implementation Approaches - ICANN GNSO · DNSSEC Implementation Approaches . The DLV infrastructure zone • DLV is a DNS-based deployment aid for early DNSSEC deployment –allows

DNSSEC Workshop - ICANN GNSO · training, software capabilities/tools) that would have particularly helpful if you would have had them at the beginning of your roll-out activities?

DNSSEC Workshop - ICANN...0915-0930 – Presentation: Update on the ‘Sunset’ of the DNSSEC Look-aside Validation Registry (DLV) 0930-1030 – Panel Discussion: DNSSEC Activities

Measurement Survey of Server-Side DNSSEC Adoption...Measurement Survey of Server-Side DNSSEC Adoption Matthäus Wander ICANN 56 Helsinki, June 27,

DNSSEC at Scale - ICANN · DNSSEC at Scale 1. Elliptic Curves 2. Negative Answers 3. Registrar and Registry Support. Elliptic Curves Speed and Size. Background - CloudFlare mitigates

A flexible DNSSEC-validating Resolver - ICANN · Large recursive DNS farms Scales, the really fast scriptable engine allows you to change resolution Flexible shared cache backends