^ Top

NANOG Meeting Presentation Abstract

Track: DNS
Meeting: NANOG50
Date / Time: 2010-10-05 3:00pm - 4:00pm
This item is webcast
Room: Ellington
Presenters: Speakers:

Duane Wessels, VeriSign

Following his college education in Physics and Telecommunications, Duane worked on the Squid/IRCache project at UCSD. For many years his company, The Measurement Factory, developed open source testing and measurement tools for HTTP and DNS. Recently he was the Director of the Domain Name System Operations Analysis and Research Center (DNS-OARC). Currently Duane researches DNSSEC deployment for VeriSign.

Wes Hardaker, SPARTA/Cobham

Wes Hardaker has been a long time advocate of new secure Internet technologies. He is a strong advocate of secure core-infrastructure technologies such as DNSSEC and SNMPv3. Mr. Hardaker also plays an active role in the IETF where he has authored multiple security related RFCs. He is actively involved with the DNSSEC-Tools project which provides an easy-to-use suite of DNSSEC tools and applications.
Mehmet Akcin, ICANN.
Abstract: The Day the Root Got Signed

On July 15 at approximately 20:50 UTC, the first signed and validatable root zone file was pushed out to the Internet's root nameserver system. In this presentation I'll talk about (1) VeriSign's infrastructure for generating ZSKs and signing zone files; (2) the steps in transitioning from a DURZ to a validatable root zone; (3) some photos taken at VeriSign on this day; and (4) a graph showing the spike in DNSKEY queries while DNS geeks eagerly awaited the new zone.



Now that the Root is Signed ...

DNSSEC Deployment has always been described a chicken and egg problem. At the publication end, the zone operators have been waiting for an incentive to sign their zones while at the user end, general-purpose DNSSEC validation was seen as inconsequential given the paucity of signed zones. The recent months have noted a marked upswing in the number of signed zones in the Internet. The Root zone is now signed and deployed in production, major TLDs have announced their plans for signing their zones, if they haven't signed already, and the number signed ccTLDs continues to grow. The time is now ripe to start extending the benefits of validation to the end user. This talk will focus on some of the benefits that can be gained from making applications DNSSEC-capable and some of the DNSSEC-capable applications that are available today.
Files: pdfAkcin(PDF)
pdfHardaker(PDF)
youtubeTrack: DNS
pdfWessels(PDF)
Sponsors: None.

Back to NANOG50 agenda.

NANOG50 Abstracts

  • Track: Research Forum
    Moderators:
    Lixia ZhangUCLA; .
    Speakers:
    Zied Ben Houidi, France Telecom R&D Orange Labs; Srikanth Sundaresan, Georgia Tech; Vyautus Valancius, Georgia Institute of Technology;
  • Track: OpenFlow
    Speakers:
    Nick McKeownStanford University; .
    Matt Davy, Indiana University; Chris Tracy, ESnet;
  • Track: Research Forum
    Moderators:
    Lixia ZhangUCLA; .
    Speakers:
    Zied Ben Houidi, France Telecom R&D Orange Labs; Srikanth Sundaresan, Georgia Tech; Vyautus Valancius, Georgia Institute of Technology;
  • Track: Research Forum
    Moderators:
    Lixia ZhangUCLA; .
    Speakers:
    Zied Ben Houidi, France Telecom R&D Orange Labs; Srikanth Sundaresan, Georgia Tech; Vyautus Valancius, Georgia Institute of Technology;
  • Track: OpenFlow
    Speakers:
    Nick McKeownStanford University; .
    Matt Davy, Indiana University; Chris Tracy, ESnet;
  • Track: Research Forum
    Moderators:
    Lixia ZhangUCLA; .
    Speakers:
    Zied Ben Houidi, France Telecom R&D Orange Labs; Srikanth Sundaresan, Georgia Tech; Vyautus Valancius, Georgia Institute of Technology;
  • Track: OpenFlow
    Speakers:
    Nick McKeownStanford University; .
    Matt Davy, Indiana University; Chris Tracy, ESnet;
  • Lightning Talks
    Speakers:
    Saleem BhattiUniversity of St. Andrews; .
    Tom DalyDynamic Network Services, Inc.; .
    Martin HanniganThe Iceland Guy; .
  • Lightning Talks
    Speakers:
    Saleem BhattiUniversity of St. Andrews; .
    Tom DalyDynamic Network Services, Inc.; .
    Martin HanniganThe Iceland Guy; .
  • Lightning Talks
    Speakers:
    Saleem BhattiUniversity of St. Andrews; .
    Tom DalyDynamic Network Services, Inc.; .
    Martin HanniganThe Iceland Guy; .
  • Track: DNS
    Speakers:
    Duane Wessels, VeriSign; Wes Hardaker, SPARTA/Cobham; Mehmet AkcinICANN; .
  • Track: DNS
    Speakers:
    Duane Wessels, VeriSign; Wes Hardaker, SPARTA/Cobham; Mehmet AkcinICANN; .
  • Track: DNS
    Speakers:
    Duane Wessels, VeriSign; Wes Hardaker, SPARTA/Cobham; Mehmet AkcinICANN; .
  • Track: Tools
    Moderators:
    Mohit Lad, Thousand Eyes; Speakers:
    Jason ZurawskiInternet2; .
    Pat Pannuto, Merit Network;
  • Track: Tools
    Moderators:
    Mohit Lad, Thousand Eyes; Speakers:
    Jason ZurawskiInternet2; .
    Pat Pannuto, Merit Network;
  • Track: Tools
    Moderators:
    Mohit Lad, Thousand Eyes; Speakers:
    Jason ZurawskiInternet2; .
    Pat Pannuto, Merit Network;

 

^ Back to Top