deployment of dnssec at ee
play

Deployment of DNSSEC at .ee ICANN 49: DNSSEC Workshop Timo Vhmar | - PowerPoint PPT Presentation

Oct 08, 2022 •149 likes •240 views

Deployment of DNSSEC at .ee ICANN 49: DNSSEC Workshop Timo Vhmar | 26.03.2014 | Introduction About Estonian Internet Foundation DNSSEC what, why, when Techie stuff Actual work Current situation | 26.03.2014 | Estonian

  1. Deployment of DNSSEC at .ee ICANN 49: DNSSEC Workshop Timo Võhmar | 26.03.2014 |

  2. Introduction • About Estonian Internet Foundation • DNSSEC what, why, when • Techie stuff • Actual work • Current situation | 26.03.2014 |

  3. Estonian Internet Foundation • Since 2010 • Team of 11 • 75000 domains • 38 registrars • Zone updates every 10 min (IXFR) • IDN since 2012 • DNSSEC since 2014 | 26.03.2014 |

  4. DNSSEC • Why? Because everyone was doing it. • Target: organisations that deal with money and sensitive personal info • Well justified goal is important success factor • Time to go-live 21 months • Public testing • Dealing with opposition • Spreading information | 26.03.2014 |

  5. Technical solution • DNSSEC is very simple • BIND 9.9, Utimaco CryptoServer LAN • Testing, testing, testing Internet (registrars, nameservers, clients) • .net EPP • dlv.isc.org Zonefile to FRED secondaries Unsigned zone file over DNS HSM1 LoadBalancer 1 TCP/IP Signed zone Signer Hidden Master PKCS11 over DNS over TCP HSM2 LoadBalancer 2 TCP/IP | 26.03.2014 |

  6. Devil is in details • Procedures • A lot of involved parties • Marketing and communication | 26.03.2014 |

  7. Situation today • 1 local registrar out with DNSSEC service • 3 of the biggest ISPs have enabled DNSSEC in resolvers • 4 high value domains signed • Waiting for the biggest registrar and banks to get ready to launch • Project deadline 30. June 2014 :) | 26.03.2014 |

  8. Thank You! Timo Võhmar timo.vohmar@internet.ee | 26.03.2014 |

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

DNSSEC Trust Anchor Repositories (TAR) Update Russ Mundy Co-Chair DNSSEC Deployment Initiative

DNSSEC Trust Anchor Repositories (TAR) Update Russ Mundy Co-Chair DNSSEC Deployment Initiative

DNSSEC Trust Anchor Repositories (TAR) Update Russ Mundy Co-Chair DNSSEC Deployment Initiative Russ.Mundy@cobham.com / mundy@sparta.com www.dnssec-deployment.org DNSSEC Trust Anchors Starting point for DNSSEC validation Choice of

375 views • 16 slides
DNSSEC Workshop @ ICANN Activities from the Region: - DNSSEC deployment in .pt 23 June 2010

DNSSEC Workshop @ ICANN Activities from the Region: - DNSSEC deployment in .pt 23 June 2010

DNSSEC Workshop @ ICANN Activities from the Region: - DNSSEC deployment in .pt 23 June 2010 Sara Monteiro Technical Infrastructure Service of DNS.PT Agenda ! About us ! Scope ! Goals ! Initiatives and Support ! Developments on .pt ! Next Steps

468 views • 11 slides
Assessing and Improving the Quality of DNSSEC Deployment Deployment Casey Deccio, Ph.D. Sandia

Assessing and Improving the Quality of DNSSEC Deployment Deployment Casey Deccio, Ph.D. Sandia

Assessing and Improving the Quality of DNSSEC Deployment Deployment Casey Deccio, Ph.D. Sandia National Laboratories AIMS-4 CAIDA, SDSC, San Diego, CA Feb 9, 2012 Sandia is a multiprogram laboratory operated by Sandia Corporation, a

913 views • 37 slides
Tools for Deployment of DNSSEC Russ Mundy Co-Chair DNSSEC Initiative Cobham Analytic Solutions

Tools for Deployment of DNSSEC Russ Mundy Co-Chair DNSSEC Initiative Cobham Analytic Solutions

COBHAM Tools for Deployment of DNSSEC Russ Mundy Co-Chair DNSSEC Initiative Cobham Analytic Solutions (aka: SPARTA, Inc. ) 08 December 2010 COBHAM Simple Illustration I need to have a of DNS Components WWW record Zone Administrator

979 views • 62 slides
Understanding the Role of Registrars in DNSSEC Deployment Taejoong (tijay) Chung, Roland van

Understanding the Role of Registrars in DNSSEC Deployment Taejoong (tijay) Chung, Roland van

Understanding the Role of Registrars in DNSSEC Deployment Taejoong (tijay) Chung, Roland van Rijswijk-Deij, David Choffnes, Dave Levin, Bruce M. Maggs, Alan Mislove, Christo Wilson 1 DNSSEC 101 example.com's Authoritative DNS Resolver DNS

1.54k views • 119 slides
DNSSEC Deployment: From End-Customer to Content ION San Diego December 11, 2012

DNSSEC Deployment: From End-Customer to Content ION San Diego December 11, 2012

DNSSEC Deployment: From End-Customer to Content ION San Diego December 11, 2012 www.internetsociety.org/deploy360/ Our Panel Today Moderator: Dan York, Internet Society Panelists: Jim Galvin, Afilias Rick Lamb, ICANN Cricket Liu,

772 views • 41 slides
Making the Case for Elliptic Curves in DNSSEC an analysis of the impact of switching to ECC based

Making the Case for Elliptic Curves in DNSSEC an analysis of the impact of switching to ECC based

Making the Case for Elliptic Curves in DNSSEC an analysis of the impact of switching to ECC based on current DNSSEC deployments in .com, .net and .org Introduction DNSSEC deployment has taken off, but there are still operational issues

408 views • 16 slides
1 Overview Introduction DNSSEC mechanisms To authenticate servers (TSIG ) To

1 Overview Introduction DNSSEC mechanisms To authenticate servers (TSIG ) To

Welcome! DNS/DNSSEC Deployment tutorial Champika Wijayatunga <champika@apnic.net> 2 August 2006, Karachi, Pakistan In conjunction with SANOG 8 Background The original DNS protocol wasnt designed with security in mind It has

705 views • 15 slides
Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research

Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research

Introduction Methodology Results Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research Project Nicolas Canceill SNE RP2 Presentations July 2, 2014 1/19 Introduction Methodology Results

398 views • 19 slides
.SE-DNSSEC Commercial launch of .SE-DNSSEC Feb 16, 2007 Signing Soft launch of service the

.SE-DNSSEC Commercial launch of .SE-DNSSEC Feb 16, 2007 Signing Soft launch of service the

. SE-DNSSEC . SEs DNSSEC service Staffan.Hagnell@iis.se .SE-DNSSEC Commercial launch of .SE-DNSSEC Feb 16, 2007 Signing Soft launch of service the .SE zone Sep 2005 2006 Start of project 2001 .SEs challenge To make DNSSEC

584 views • 24 slides
DNSSEC in .at (and beyond) Panel discussion DNSSEC activities in Europe DNSSEC workshop

DNSSEC in .at (and beyond) Panel discussion DNSSEC activities in Europe DNSSEC workshop

ICANN 50 DNSSEC in .at (and beyond) Panel discussion DNSSEC activities in Europe DNSSEC workshop Jun 25 2014 Alexander Mayrhofer London, UK alexander.mayrhofer@nic.at ICANN 50 DNSSEC Services n ccTLD: .at l DNSSEC in production

109 views • 10 slides
Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research

Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research

Introduction Methodology Results Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research Project Nicolas Canceill RIPE68 May 14, 2014 1/20 Introduction Methodology Results Introduction 1

673 views • 20 slides
DNSSEC activities @ nic.at Panel discussion DNSSEC activities in Europe DNSSEC workshop

DNSSEC activities @ nic.at Panel discussion DNSSEC activities in Europe DNSSEC workshop

ICANN44 DNSSEC activities @ nic.at Panel discussion DNSSEC activities in Europe DNSSEC workshop Jun 27 2012 Alexander Mayrhofer Prague, CZ alexander.mayrhofer@nic.at ICANN44 .at DNSSEC Timeline Testbed DS in root Feb 2011 Feb 09

404 views • 8 slides
Deploying New DNSSEC Algorithms ICANN 53 DNSSEC Workshop June 24, 2015 Buenos Aires, Argentina

Deploying New DNSSEC Algorithms ICANN 53 DNSSEC Workshop June 24, 2015 Buenos Aires, Argentina

Deploying New DNSSEC Algorithms ICANN 53 DNSSEC Workshop June 24, 2015 Buenos Aires, Argentina Dan York, Internet Society www.internetsociety.org/deploy360 DNSSEC Algorithms Used to generate keys for signing DNSKEY Used in DNSSEC

490 views • 18 slides
DNSSEC CS 161: Computer Security Prof. David Wagner April 11, 2016 DNSSEC Last lecture, you

DNSSEC CS 161: Computer Security Prof. David Wagner April 11, 2016 DNSSEC Last lecture, you

DNSSEC CS 161: Computer Security Prof. David Wagner April 11, 2016 DNSSEC Last lecture, you invented DNSSEC. Well, the basic ideas, anyway: Sign all DNS records. Signatures let you verify answer to DNS query, without having to trust the

835 views • 49 slides
Challenges To Deploying New DNSSEC Algorithms ICANN 55 DNSSEC Workshop March 8, 2016 Marrakech,

Challenges To Deploying New DNSSEC Algorithms ICANN 55 DNSSEC Workshop March 8, 2016 Marrakech,

Challenges To Deploying New DNSSEC Algorithms ICANN 55 DNSSEC Workshop March 8, 2016 Marrakech, Morocco Dan York, Internet Society www.internetsociety.org/deploy360 DNSSEC Algorithms Used to generate keys for signing DNSKEY Used

417 views • 15 slides
LED Means Business Planning in a W orld of I nform ation Overload Presentation to: Local

LED Means Business Planning in a W orld of I nform ation Overload Presentation to: Local

LED Means Business Planning in a W orld of I nform ation Overload Presentation to: Local Employment Dynamics Partnership Maggie Moree Director of Federal Affairs Business Council of NYS March 6 , 2 0 0 8 W hy am I here? Many years as

269 views • 16 slides
Management and Retention Association of Corporate Counsel Nonprofit Organizations Committee

Management and Retention Association of Corporate Counsel Nonprofit Organizations Committee

Records and Information Management and Retention Association of Corporate Counsel Nonprofit Organizations Committee Legal Quick Hit March 13, 2012 3 pm ET W. Warren Hamel Victoria R. Danta Venable LLP 750 E. Venable LLP Pratt St.

603 views • 31 slides
Talking Back to the Text Marginalia, Marginalization, and Marginalized People James Elmborg

Talking Back to the Text Marginalia, Marginalization, and Marginalized People James Elmborg

Talking Back to the Text Marginalia, Marginalization, and Marginalized People James Elmborg University of Alabama Oklahoma ACRL November 10, 2017 What is a margin? An edge, a border; that part of a surface which lies immediately

717 views • 33 slides
Better Together: Quarterly Employee FTE Reporting October 6, 2017 Proj ect Team Budget: HR:

Better Together: Quarterly Employee FTE Reporting October 6, 2017 Proj ect Team Budget: HR:

Better Together: Quarterly Employee FTE Reporting October 6, 2017 Proj ect Team Budget: HR: Our Fearless Leader: Brian Michael Joanne Y est ramski, UML The HR Gurus: S haron Vieira, UMS O Budget: Michael Glynn, UMB HR:

196 views • 5 slides
Inaugural Intermediate Little League World Series July 30-August 5, 2013 Livermore, CA

Inaugural Intermediate Little League World Series July 30-August 5, 2013 Livermore, CA

Int BRINGING THE WORLD STAGE TO NORTHERN CALIFORNIA Inaugural Intermediate Little League World Series July 30-August 5, 2013 Livermore, CA www.intermediateworldseries.org [ADDRESS INFORMATION] Welcome Little League Supporter, Each

306 views • 8 slides
New Tax and Licensing Revenue Opportunities Navigating Emerging Legal, Regulatory and Tax Issues

New Tax and Licensing Revenue Opportunities Navigating Emerging Legal, Regulatory and Tax Issues

Presenting a live 90-minute webinar with interactive Q&A Uber, Airbnb and Municipalities: Maximizing New Tax and Licensing Revenue Opportunities Navigating Emerging Legal, Regulatory and Tax Issues in the Peer-to-Peer Economy WEDNESDAY,

1.14k views • 77 slides
Organizational Climate Patterns of interactions and behaviors among group members Schein, 1992

Organizational Climate Patterns of interactions and behaviors among group members Schein, 1992

Good Places to Do Science: I mproving Diversity, Equity and I nclusion in Academic S&E Departments Diana Bilimoria Professor of Organizational Behavior Case Western Reserve University diana.bilimoria@case.edu IWin Workshop 4-30-2010

200 views • 17 slides
The Process of Developing a Technology-rich, yet Culturally- relevant Science Curriculum for

The Process of Developing a Technology-rich, yet Culturally- relevant Science Curriculum for

The Process of Developing a Technology-rich, yet Culturally- relevant Science Curriculum for Grades 9 and 10 Tony Bartley and John Friesen, Lakehead University, Thunder Bay Themes for the Presentation: The Context of KiHS Curriculum

737 views • 48 slides

More recommend