DNS Security Extensions

6/2/00


Click here to start


Table of Contents

DNS Security Extensions

Changes are coming to DNS

DNSSEC Ingredients

Features

Specification, Software Status

State of the Protocol

Deployment Plans

DNS Terminology

DNS RRs and RR sets

Zones vs. Servers

Cryptography

DNS Security Extensions

The KEY RR

The SIG RR

The NXT RR

A quirk of NXT

A signed zone, page 1

A signed zone, page 2

DNSSEC Queries

Going secure

Query/Response Security

TSIG

TSIG Notes

TSIG in configuration files

SIG(0)

SIG (0) Notes

TKEY

TKEY Notes

Security Data Server

The CERT RR

Securing Dynamic Update

Impact

Validating Delegations

Off-line Signing

Performance Hits

Bibliography - IETF Documents

Bibliography - Other Documents

Author: Edward Lewis