DNS/DNSSEC
DNS/DNSSEC Tutorial
When: | Monday, 25 February 2013 |
---|---|
Time: | 9:00 - 12:30 (UTC +8) |
Where: | Azalea (White & Pink) |
Presenters: | Phil Regnauld & Hans Kuhn (NSRC) |
DNSSEC is an update to the traditional DNS system. DNSSEC uses public-key cryptography to update the DNS trust model to ensure verifiable DNS responses to requests from clients.
In this 1/2 day tutorial we will cover the following:
- Problems with insecure DNS
- The basics of DNSSEC, one solution available now
- The new resource record sets, the extensions to the protocol
Attendees will see a hands-on demonstration of securing a zone using DNSSEC. This will include key generation, updating of the zone file, configuration of a forwarding resolver, publishing the zone and verification of the newly signed zone. Step-by-step instructions will be made available to all attendees with laptops, who want to follow along.