DNSSEC Workshop Dan York, Internet Society | ICANN 55 | March 2016 - - PowerPoint PPT Presentation

▶
dnssec workshop
SMART_READER_LITE
LIVE PREVIEW

DNSSEC Workshop Dan York, Internet Society | ICANN 55 | March 2016 - - PowerPoint PPT Presentation

Dec 18, 2023 272 likes •583 views

DNSSEC Workshop Dan York, Internet Society | ICANN 55 | March 2016 Remote Participation Slides and audio streams at: https://meetings.icann.org/en/marrakech 55/schedule/wed-dnssec Live video stream via YouTube at:

slide-1
SLIDE 1

DNSSEC Workshop

Dan York, Internet Society | ICANN 55 | March 2016

slide-2
SLIDE 2

| 2

Remote Participation

Slides and audio streams at:

  • https://meetings.icann.org/en/marrakech

55/schedule/wed-dnssec Live video stream via YouTube at:

  • http://bit.ly/dnssec55am
  • http://bit.ly/dnssec55pm
slide-3
SLIDE 3

| 3

Program Committee

  • Steve Crocker, Shinkuro, Inc.
  • Mark Elkins, DNS/ZACR
  • Cath Goulding, Nominet
  • Jean Robert Hountomey, AfricaCERT
  • Jacques Latour, CIRA
  • Xiaodong Lee, CNNIC
  • Luciano Minuchin, NIC.AR
  • Russ Mundy, SPARTA, A Parsons Company
  • Ondřej Surý, CZNIC
  • Yoshiro Yoneya, JPRS
  • Dan York, Internet Society
  • Julie Hedlund and Kathy Schnitt, ICANN
slide-4
SLIDE 4

| 4

Luncheon Sponsors

  • Afilias
  • CIRA
  • Dyn
  • SIDN
  • Opportunity for a fifth sponsor!
slide-5
SLIDE 5

| 5

DNSSEC Implementer’s Gathering Sponsors

The Program Committee held a DNSSEC Implementers Gathering on 07 March sponsored by:

slide-6
SLIDE 6

| 6

DNSSEC Implementer’s Gathering

Thanks to: Who can sponsor the gathering at ICANN 56?

slide-7
SLIDE 7

| 7

Support

The DNSSEC Workshop and associated activities at ICANN are an organized activity of the:

  • ICANN Security and Stability

Advisory Committee (SSAC) with additional assistance from the:

  • Internet Society

Deploy360 Programme

slide-8
SLIDE 8

| 8

Program

0900-0915 – Presentation: Dan York, Internet Society – DNSSEC Workshop Introduction, Program, Deployment Around the World – Counts, Counts, Counts 0915-0930 – Presentation: Update on the ‘Sunset’ of the DNSSEC Look-aside Validation Registry (DLV) 0930-1030 – Panel Discussion: DNSSEC Activities in the African Region 1030-1045 – Coffee Break 1045-1115 – Presentation: Open DNSSEC SIGNER Switchover Experience 1115-1145 – Presentation: DNSSEC At Scale 1145-1200 – Great DNS/DNSSEC Quiz 1200-1315 – Lunch Break in Grand Bleu 1315-1415 – Panel Discussion: DNSSEC and Elliptic Curve Cryptography 1415-1500 – Panel Discussion: DNSSEC Root Key Signing Key (KSK) Rollover 1500-1515 – Presentation: DNSSEC - How Can I Help?

slide-9
SLIDE 9

DNSSEC Deployment Around the World: Counts, Counts, Counts

Dan York, Internet Society | ICANN 55 | March 2016

slide-10
SLIDE 10

The Two Parts of DNSSEC

Signing Validating

ISPs Enterprises Applications DNS Hosting Registrars Registries

slide-11
SLIDE 11

| 11

11

http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=0&r=0&w=7&r=1

slide-12
SLIDE 12

| 12

12

http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=1&r=0&w=7&r=1

slide-13
SLIDE 13

| 13

13

http://stats.labs.apnic.net/dnssec/XB?o=cXHw7x1g1r1

slide-14
SLIDE 14

| 14

14

http://stats.labs.apnic.net/dnssec/XB?o=cXHw7x1g1r1

slide-15
SLIDE 15

| 15

15 https://rick.eng.br/dnssecstat/

slide-16
SLIDE 16

| 16

16 https://rick.eng.br/dnssecstat/

Note: Only includes the TLDs for which Rick Lamb can get statistics. (Example, .GOV is not listed.)

slide-17
SLIDE 17

| 17

TLD DNSSEC Implementation Status

Experimental – internal experiments Announced – Public commitment to deploy Partial – Zone is signed but not in operation DS in Root Operational – Accepting signed delegations

slide-18
SLIDE 18

| 18

Note About Operational Status

Please let Dan York know if your ccTLD is now “Operational”:

  • Accepting DS records from signed zones

Send updates to york@isoc.org Need your help as we have no automated way of knowing Operational status.

slide-19
SLIDE 19

| 19

slide-20
SLIDE 20

| 20

Botswana - .BW December 2015

slide-21
SLIDE 21

| 21

Azerbaijan - .AZ January 2016

slide-22
SLIDE 22

| 22

slide-23
SLIDE 23

| 23

slide-24
SLIDE 24

| 24

slide-25
SLIDE 25

| 25

Receiving the DNSSEC Deployment Maps

The DNSSEC Deployment Maps are published via email every Monday morning through the Internet Society Deploy360 Programme. To subscribe, visit:

www.internetsociety.org/deploy360/dnssec/maps/

slide-26
SLIDE 26

| 26

DNSSEC Event Calendar

New calendar to track DNSSEC/DANE-related events. Two views – event listing: https://www.dnssec-deployment.org/events/ Calendar view: http://www.dnssec-deployment.org/calendar/ Send event submissions to york@isoc.org

slide-27
SLIDE 27

| 27

IETF 95 Hackathon

Sat/Sun, Apr 2/3 – Buenos Aires – IETF 95

  • https://www.ietf.org/hackathon/95-

hackathon.html

  • https://www.ietf.org/registration/MeetingWiki/wiki

/95hackathon

  • Opportunity to work on new tools or services for

DNSSEC / DANE / DNS Privacy

  • Join us!
slide-28
SLIDE 28

| 28

DNSSEC History Project

The DNSSEC History Project is an ongoing project to collect and record the history of the work that went into bringing about the deployment of DNSSEC. To view – or to contribute – please see: https://wiki.tools.isoc.org/DNSSEC_History_Project

slide-29
SLIDE 29

Thank you and Questions

Dan York, Internet Society | ICANN 55 | March 2016