understanding the role of registrars in dnssec deployment
play

Understanding the Role of Registrars in DNSSEC Deployment Taejoong - PowerPoint PPT Presentation

Sep 13, 2023 •343 likes •1.54k views

Understanding the Role of Registrars in DNSSEC Deployment Taejoong (tijay) Chung, Roland van Rijswijk-Deij, David Choffnes, Dave Levin, Bruce M. Maggs, Alan Mislove, Christo Wilson 1 DNSSEC 101 example.com's Authoritative DNS Resolver DNS

  1. Anecdotal Examples Experiment Result [1] They removed a DNSSEC menu We saw the DNSKEY deployed (but [2] “ Most people do not understand DNS, not DS records) so asked why you so imagine the white faces when I mention don’t upload DS records. DNSSEC ” We asked a registrar to upload a DS It was installed successfully record by email from the different email address than the one that registered We asked a registrar to upload a DS record to our domain via web live chat 10

  2. Anecdotal Examples Experiment Result [1] They removed a DNSSEC menu We saw the DNSKEY deployed (but [2] “ Most people do not understand DNS, not DS records) so asked why you so imagine the white faces when I mention don’t upload DS records. DNSSEC ” We asked a registrar to upload a DS It was installed successfully record by email from the different email address than the one that registered It was installed on someone else’s We asked a registrar to upload a DS domain due to a mistake by the record to our domain via web live customer service agent chat 10

  3. Details of the Last Example 11

  4. Details of the Last Example 3:45:32 PM tijay hg-dnssec.com 3600 IN DS 2371 13 2 129f34c04ac58ece5218b9894148304a736a63757f58ff0cddd9b8df4989 11

  5. Details of the Last Example 3:45:32 PM tijay hg-dnssec.com 3600 IN DS 2371 13 2 129f34c04ac58ece5218b9894148304a736a63757f58ff0cddd9b8df4989 3:56:05 PM Jeniffer S Awesome! one moment 11

  6. Details of the Last Example 3:45:32 PM tijay hg-dnssec.com 3600 IN DS 2371 13 2 129f34c04ac58ece5218b9894148304a736a63757f58ff0cddd9b8df4989 3:56:05 PM Jeniffer S Awesome! one moment 3:56:09 PM Jeniffer S I have now save the request information! Manage DNSSEC paananenmusic.com Record added successfully. It can take 4-8 hours for DNS to propagate 11

  7. Details of the Last Example 3:45:32 PM tijay hg-dnssec.com 3600 IN DS 2371 13 2 129f34c04ac58ece5218b9894148304a736a63757f58ff0cddd9b8df4989 3:56:05 PM Jeniffer S Awesome! one moment 3:56:09 PM Jeniffer S I have now save the request information! Manage DNSSEC paananenmusic.com Record added successfully. It can take 4-8 hours for DNS to propagate 3:57:19 PM tijay paananenmusic.com? 3:57:28 PM tijay my domain is hg-dnssec.com? 11

  8. Details of the Last Example 3:45:32 PM tijay hg-dnssec.com 3600 IN DS 2371 13 2 129f34c04ac58ece5218b9894148304a736a63757f58ff0cddd9b8df4989 3:56:05 PM Jeniffer S Awesome! one moment 3:56:09 PM Jeniffer S I have now save the request information! Manage DNSSEC paananenmusic.com Record added successfully. It can take 4-8 hours for DNS to propagate 3:57:19 PM tijay paananenmusic.com? 3:57:28 PM tijay my domain is hg-dnssec.com? 3:58:41 PM Jeniffer S I apologize, you are right, silly me, one moment 11

  9. Open Question

  10. Open Question Why is so hard to deploy DNSSEC?

  11. Open Question Why is so hard to deploy DNSSEC? ? ? How does registrar policy impact the deployment?

  12. Outline Why is so hard to deploy DNSSEC?

  13. Outline Why is so hard to deploy DNSSEC? Popular registrar with lots of (1) domains and (2) DNSSEC-enabled domains

  14. Checking Registrar’s DNSSEC Policy Registrar Supports Registrar DNSSEC? DNS Operator 14

  15. Checking Registrar’s DNSSEC Policy Registrar Supports Registrar DNSSEC? DNS Operator Registrar Owner Supports DNS Operator DS upload? 14

  16. Checking Registrar’s DNSSEC Policy Registrar Supports Registrar DNSSEC? DNS Operator Registrar Owner Supports DNS Operator DS upload? Registrar Validates DS record? 14

  17. Popular Registrar’s DNSSEC Policy Registrar Supports DNSSEC? Registrar Supports DS upload? Registrar Validates DS record? 15

  18. Popular Registrar’s DNSSEC Policy Registrar Registrar Supports GoDaddy (domaincontrol.com) DNSSEC? NameCheap (registrar-servers.com) OVH (ovh.net) HostGator (hostgator.com) Registrar Amazon (aws-dns) Supports DS upload? Google (googledomains.com) 123-reg (123-reg.co.uk) RightSide (name.com) eNom (name-services.com) Registrar NameBright (namebrightdns.com) Validates DS record? DreamHost (dreamhost.com) The others (10 registrars) 15

  19. Popular Registrar’s DNSSEC Policy Registrar Registrar Supports GoDaddy (domaincontrol.com) DNSSEC? NameCheap (registrar-servers.com) OVH (ovh.net) HostGator (hostgator.com) Registrar Amazon (aws-dns) Supports DS upload? Google (googledomains.com) 123-reg (123-reg.co.uk) RightSide (name.com) eNom (name-services.com) Registrar NameBright (namebrightdns.com) Validates DS record? DreamHost (dreamhost.com) The others (10 registrars) 15

  20. Popular Registrar’s DNSSEC Policy Registrar 2.5/20 Registrar DNS Registrar Operator Supports GoDaddy (domaincontrol.com) DNSSEC? NameCheap (registrar-servers.com) OVH (ovh.net) HostGator (hostgator.com) Registrar Amazon (aws-dns) Supports DS upload? Google (googledomains.com) 123-reg (123-reg.co.uk) RightSide (name.com) eNom (name-services.com) Registrar NameBright (namebrightdns.com) Validates DS record? DreamHost (dreamhost.com) The others (10 registrars) Some nameservers don’t support DNSSEC 15

  21. Popular Registrar’s DNSSEC Policy Owner DNS Operator 2.5/20 Registrar DS Upload Registrar Web Email Supports — GoDaddy (domaincontrol.com) DNSSEC? — NameCheap (registrar-servers.com) — OVH (ovh.net) 11/20 — HostGator (hostgator.com) Registrar — Amazon (aws-dns) Supports — DS upload? Google (googledomains.com) — 123-reg (123-reg.co.uk) — RightSide (name.com) eNom (name-services.com) Registrar NameBright (namebrightdns.com) Validates DS record? DreamHost (dreamhost.com) The others (10 registrars) 16

  22. Popular Registrar’s DNSSEC Policy Owner DNS Operator 2.5/20 DS Registrar DS Upload Validation Registrar Web Email Supports — GoDaddy (domaincontrol.com) DNSSEC? — NameCheap (registrar-servers.com) — OVH (ovh.net) 11/20 — HostGator (hostgator.com) Registrar — Amazon (aws-dns) Supports — DS upload? Google (googledomains.com) — 123-reg (123-reg.co.uk) — RightSide (name.com) 2/20 eNom (name-services.com) Registrar NameBright (namebrightdns.com) Validates DS record? DreamHost (dreamhost.com) The others (10 registrars) 17

  23. Popular Registrar DNS Operator # of Registrar Registrar 2.5/20 Support DNSSEC? Owner 11/20 Check DS Owner 2/11 Validation Registrar DNSSEC Support for popular registrars is quite poor Each registrar has different policy for supporting DNSSEC. 18

  24. Popular DNSSEC Support Registrars Registrar Registrar Supports OVH (ovh.net) DNSSEC? Loopia (loopia.se) DomainNameShop (hyp.net) TransIP (transip.net) Registrar MeshDigital (domainmonster.com) Supports OVH (anycast.me) DS upload? TransIP (transip.nl) Binero (binero.se) KPN (is.nl) Registrar PCExtreme (pcextreme.nl) Validates Antagonist (webhostingserver.nl) DS record? NameCheap (registrar-servers.com) 19

  25. Registrar DNS Operator Registrar DNS Operator 10/12 Registrar DNSSEC Publish DS Registrar Default Records? Supports OVH (ovh.net) DNSSEC? Loopia (loopia.se) DomainNameShop (hyp.net) TransIP (transip.net) Registrar MeshDigital (domainmonster.com) Supports OVH (anycast.me) DS upload? TransIP (transip.nl) Binero (binero.se) KPN (is.nl) Registrar PCExtreme (pcextreme.nl) Validates Antagonist (webhostingserver.nl) DS record? NameCheap (registrar-servers.com) Selective support 20

  26. Owner DNS Operator 10/12 Registrar Registrar Supports OVH (ovh.net) DNSSEC? Loopia (loopia.se) DomainNameShop (hyp.net) TransIP (transip.net) Registrar MeshDigital (domainmonster.com) Supports OVH (anycast.me) DS upload? TransIP (transip.nl) Binero (binero.se) KPN (is.nl) Registrar PCExtreme (pcextreme.nl) Validates Antagonist (webhostingserver.nl) DS record? NameCheap (registrar-servers.com)

  27. Owner DNS Operator Owner DNS 10/12 Operator Registrar Registrar DS Upload Supports OVH (ovh.net) DNSSEC? Loopia (loopia.se) DomainNameShop (hyp.net) 10/12 TransIP (transip.net) Registrar MeshDigital (domainmonster.com) Supports OVH (anycast.me) DS upload? TransIP (transip.nl) Binero (binero.se) KPN (is.nl) Registrar PCExtreme (pcextreme.nl) Validates Antagonist (webhostingserver.nl) DS record? NameCheap (registrar-servers.com)

  28. DS Validation Owner DNS 10/12 DS Operator Registrar Validation Registrar DS Upload Supports OVH (ovh.net) DNSSEC? Loopia (loopia.se) DomainNameShop (hyp.net) 10/12 TransIP (transip.net) Registrar MeshDigital (domainmonster.com) Supports OVH (anycast.me) DS upload? TransIP (transip.nl) Binero (binero.se) 2/12 — KPN (is.nl) Registrar PCExtreme (pcextreme.nl) Validates Antagonist (webhostingserver.nl) — DS record? NameCheap (registrar-servers.com) Fetches a DNSKEY from the nameserver 22

  29. Other Security Issues Owner DNS DS Upload 10/12 DS Operator Registrar Validation Registrar DS Upload Web Email Supports — OVH (ovh.net) DNSSEC? Loopia (loopia.se) — DomainNameShop (hyp.net) 10/12 — TransIP (transip.net) Registrar MeshDigital (domainmonster.com) Supports — OVH (anycast.me) DS upload? — TransIP (transip.nl) Binero (binero.se) 2/12 — KPN (is.nl) Registrar PCExtreme (pcextreme.nl) Validates Antagonist (webhostingserver.nl) — DS record? — NameCheap (registrar-servers.com) 23

  30. Other Security Issues Owner DNS DS Upload 10/12 DS Operator Registrar Validation Registrar DS Upload Web Email Supports — OVH (ovh.net) DNSSEC? Loopia (loopia.se) — DomainNameShop (hyp.net) 10/12 — TransIP (transip.net) Registrar MeshDigital (domainmonster.com) Supports — OVH (anycast.me) DS upload? — TransIP (transip.nl) Binero (binero.se) 2/12 — KPN (is.nl) Registrar PCExtreme (pcextreme.nl) Validates Antagonist (webhostingserver.nl) — DS record? — NameCheap (registrar-servers.com) 23

  31. Outline Why is DNSSEC deployment so rare? ? ? How does a registrar policy impact the deployment?

  32. Outline Why is DNSSEC deployment so rare? ? ? How does a registrar policy impact the deployment? We need historical dataset

  33. Dataset Domains Measurement Period TLD (Daily Scan) Percent w/ Total DNSKEY .com 2015/03/01 ~ 2016/12/31 118,147,199 0.7% .net 2015/03/01 ~ 2016/12/31 13,773,903 1.0% .org 2015/03/01 ~ 2016/12/31 9,682,750 1.1% .nl 2016/02/09 ~ 2016/12/31 5,674,208 51.6% .se 2016-06-07 ~ 2016/12/31 1,388,372 46.7% 25

  34. Dataset Domains Measurement Period TLD (Daily Scan) Percent w/ Total DNSKEY .com 2015/03/01 ~ 2016/12/31 118,147,199 0.7% .net 2015/03/01 ~ 2016/12/31 13,773,903 1.0% .org 2015/03/01 ~ 2016/12/31 9,682,750 1.1% .nl 2016/02/09 ~ 2016/12/31 5,674,208 51.6% .se 2016-06-07 ~ 2016/12/31 1,388,372 46.7% Over 750 billion DNS Records 25

  35. [1] Registry: Financial Incentive 100 .com 80 .net .org .se 60 with DNSKEY and DS record .nl .nl measurement 40 begins here Percent of domains 20 KPN KPN (*.is.nl) 0 100 .com 80 .net .org 60 .se .nl 40 .se measurement 20 begins here Loopia Loopia (*.loopia.se) 0 05/15 08/15 11/15 02/16 05/16 08/16 11/16 Date 26

  36. [1] Registry: Financial Incentive 100 .com 80 .net .org .se 60 with DNSKEY and DS record .nl .nl measurement 40 begins here Percent of domains 20 KPN KPN (*.is.nl) 0 100 .com 80 .net .org 60 .se .nl 40 .se measurement 20 begins here Loopia Loopia (*.loopia.se) 0 05/15 08/15 11/15 02/16 05/16 08/16 11/16 Date 26

  37. [1] Registry: Financial Incentive 100 .com 80 .net .org .se 60 with DNSKEY and DS record .nl .nl measurement 40 begins here Percent of domains 20 KPN KPN (*.is.nl) 0 100 .com 80 .net .org 60 .se .nl 40 .se measurement 20 begins here Loopia Loopia (*.loopia.se) 0 05/15 08/15 11/15 02/16 05/16 08/16 11/16 Date 26

  38. [1] Registry: Financial Incentive 100 .com 80 .net .org .se 60 with DNSKEY and DS record .nl .nl measurement 40 begins here Percent of domains 20 KPN KPN (*.is.nl) 0 100 .com 80 .net .org 60 .se .nl 40 .se measurement 20 begins here Loopia Loopia (*.loopia.se) 0 05/15 08/15 11/15 02/16 05/16 08/16 11/16 Date 26

  39. [1] Registry: Financial Incentive 100 .com 80 .net .org .se 60 with DNSKEY and DS record .nl .nl measurement 40 begins here Percent of domains 20 KPN KPN (*.is.nl) 0 100 .com 80 .net .org 60 .se .nl 40 .se measurement 20 begins here Loopia Loopia (*.loopia.se) 0 05/15 08/15 11/15 02/16 05/16 08/16 11/16 Date 26

  40. [1] Registry: Financial Incentive 100 .com 80 .net .org .se 60 with DNSKEY and DS record .nl .nl measurement 40 begins here Percent of domains 20 KPN KPN (*.is.nl) 0 100 .com 80 .net .org 60 .se .nl 40 .se measurement 20 begins here Loopia Loopia (*.loopia.se) 0 05/15 08/15 11/15 02/16 05/16 08/16 11/16 Date Financial gain is a huge incentive 
 Financial for deploying DNSSEC Incentive 26

  41. [2] Registrar: Free vs. Paid Percent of domains with 30 25 DS record 20 OVH 15 GoDaddy 10 5 0 05/15 08/15 11/15 02/16 05/16 08/16 11/16 Date 27

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

DNSSEC Trust Anchor Repositories (TAR) Update Russ Mundy Co-Chair DNSSEC Deployment Initiative

DNSSEC Trust Anchor Repositories (TAR) Update Russ Mundy Co-Chair DNSSEC Deployment Initiative

DNSSEC Trust Anchor Repositories (TAR) Update Russ Mundy Co-Chair DNSSEC Deployment Initiative Russ.Mundy@cobham.com / mundy@sparta.com www.dnssec-deployment.org DNSSEC Trust Anchors Starting point for DNSSEC validation Choice of

375 views • 16 slides
DNSSEC Workshop @ ICANN Activities from the Region: - DNSSEC deployment in .pt 23 June 2010

DNSSEC Workshop @ ICANN Activities from the Region: - DNSSEC deployment in .pt 23 June 2010

DNSSEC Workshop @ ICANN Activities from the Region: - DNSSEC deployment in .pt 23 June 2010 Sara Monteiro Technical Infrastructure Service of DNS.PT Agenda ! About us ! Scope ! Goals ! Initiatives and Support ! Developments on .pt ! Next Steps

468 views • 11 slides
Deployment of DNSSEC at .ee ICANN 49: DNSSEC Workshop Timo Vhmar | 26.03.2014 | Introduction

Deployment of DNSSEC at .ee ICANN 49: DNSSEC Workshop Timo Vhmar | 26.03.2014 | Introduction

Deployment of DNSSEC at .ee ICANN 49: DNSSEC Workshop Timo Vhmar | 26.03.2014 | Introduction About Estonian Internet Foundation DNSSEC what, why, when Techie stuff Actual work Current situation | 26.03.2014 | Estonian

240 views • 9 slides
Who am I? DNSSEC and Registrars? Employed by Netnod Who am I? Employed by Netnod IX,

Who am I? DNSSEC and Registrars? Employed by Netnod Who am I? Employed by Netnod IX,

Who am I? DNSSEC and Registrars? Employed by Netnod Who am I? Employed by Netnod IX, DNS, Root, NTP 50% owner of Frobbit! Registrar ccTLD DNS hosting etc SSAC Chair ICANN gTLD1 gTLD2 Registry Registry gTLD1 gTLD1

192 views • 15 slides
Assessing and Improving the Quality of DNSSEC Deployment Deployment Casey Deccio, Ph.D. Sandia

Assessing and Improving the Quality of DNSSEC Deployment Deployment Casey Deccio, Ph.D. Sandia

Assessing and Improving the Quality of DNSSEC Deployment Deployment Casey Deccio, Ph.D. Sandia National Laboratories AIMS-4 CAIDA, SDSC, San Diego, CA Feb 9, 2012 Sandia is a multiprogram laboratory operated by Sandia Corporation, a

913 views • 37 slides
Tools for Deployment of DNSSEC Russ Mundy Co-Chair DNSSEC Initiative Cobham Analytic Solutions

Tools for Deployment of DNSSEC Russ Mundy Co-Chair DNSSEC Initiative Cobham Analytic Solutions

COBHAM Tools for Deployment of DNSSEC Russ Mundy Co-Chair DNSSEC Initiative Cobham Analytic Solutions (aka: SPARTA, Inc. ) 08 December 2010 COBHAM Simple Illustration I need to have a of DNS Components WWW record Zone Administrator

979 views • 62 slides
DNSSEC Deployment: From End-Customer to Content ION San Diego December 11, 2012

DNSSEC Deployment: From End-Customer to Content ION San Diego December 11, 2012

DNSSEC Deployment: From End-Customer to Content ION San Diego December 11, 2012 www.internetsociety.org/deploy360/ Our Panel Today Moderator: Dan York, Internet Society Panelists: Jim Galvin, Afilias Rick Lamb, ICANN Cricket Liu,

772 views • 41 slides
Making the Case for Elliptic Curves in DNSSEC an analysis of the impact of switching to ECC based

Making the Case for Elliptic Curves in DNSSEC an analysis of the impact of switching to ECC based

Making the Case for Elliptic Curves in DNSSEC an analysis of the impact of switching to ECC based on current DNSSEC deployments in .com, .net and .org Introduction DNSSEC deployment has taken off, but there are still operational issues

408 views • 16 slides
1 Overview Introduction DNSSEC mechanisms To authenticate servers (TSIG ) To

1 Overview Introduction DNSSEC mechanisms To authenticate servers (TSIG ) To

Welcome! DNS/DNSSEC Deployment tutorial Champika Wijayatunga <champika@apnic.net> 2 August 2006, Karachi, Pakistan In conjunction with SANOG 8 Background The original DNS protocol wasnt designed with security in mind It has

705 views • 15 slides
Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research

Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research

Introduction Methodology Results Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research Project Nicolas Canceill SNE RP2 Presentations July 2, 2014 1/19 Introduction Methodology Results

398 views • 19 slides
.SE-DNSSEC Commercial launch of .SE-DNSSEC Feb 16, 2007 Signing Soft launch of service the

.SE-DNSSEC Commercial launch of .SE-DNSSEC Feb 16, 2007 Signing Soft launch of service the

. SE-DNSSEC . SEs DNSSEC service Staffan.Hagnell@iis.se .SE-DNSSEC Commercial launch of .SE-DNSSEC Feb 16, 2007 Signing Soft launch of service the .SE zone Sep 2005 2006 Start of project 2001 .SEs challenge To make DNSSEC

584 views • 24 slides
DNS Operator Role Bootstrapping DNSSEC Chain of Trust Update since ICANN53 Buenos Aires ICANN54

DNS Operator Role Bootstrapping DNSSEC Chain of Trust Update since ICANN53 Buenos Aires ICANN54

DNS Operator Role Bootstrapping DNSSEC Chain of Trust Update since ICANN53 Buenos Aires ICANN54 Dublin DNSSEC Workshop Latour - October 21, 2015 Last update ICANN53 DNSSEC Workshop June 24, 2015

442 views • 11 slides
Mouhamet Diop is the CEO of NEXT SA, an innovative

Mouhamet Diop is the CEO of NEXT SA, an innovative

DNSSEC Activities in Africa ISPs, Registries, and Registrars Wilson Abigaba Wilson is the IT Projects Manager at Orange Uganda. He led IPv6

47 views • 4 slides
DNSSEC in .at (and beyond) Panel discussion DNSSEC activities in Europe DNSSEC workshop

DNSSEC in .at (and beyond) Panel discussion DNSSEC activities in Europe DNSSEC workshop

ICANN 50 DNSSEC in .at (and beyond) Panel discussion DNSSEC activities in Europe DNSSEC workshop Jun 25 2014 Alexander Mayrhofer London, UK alexander.mayrhofer@nic.at ICANN 50 DNSSEC Services n ccTLD: .at l DNSSEC in production

109 views • 10 slides
Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research

Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research

Introduction Methodology Results Measuring the Deployment of DNSSEC over the Internet System & Network Engineering Research Project Nicolas Canceill RIPE68 May 14, 2014 1/20 Introduction Methodology Results Introduction 1

673 views • 20 slides
DNSSEC in .SE Anne-Marie Eklund Lwinder amel@iis.se; Twitter: @amelsec Its a long story,

DNSSEC in .SE Anne-Marie Eklund Lwinder amel@iis.se; Twitter: @amelsec Its a long story,

DNSSEC in .SE Anne-Marie Eklund Lwinder amel@iis.se; Twitter: @amelsec Its a long story, as you may already be aware of. Deployed by a smaller number out of 148 of the .SE accredited registrars, 4 from the top-10. The biggest

421 views • 5 slides
13 Things to Consider Before DNSSEC John Kristoff jtk@cymru.com FIRST 2010 John Kristoff

13 Things to Consider Before DNSSEC John Kristoff jtk@cymru.com FIRST 2010 John Kristoff

13 Things to Consider Before DNSSEC John Kristoff jtk@cymru.com FIRST 2010 John Kristoff Team Cymru 1 Where is the DNSSEC? We make no endorsement of DNSSEC here We offer no repudiation of DNSSEC here The considerations herein

543 views • 31 slides
Multi Provider DNSSEC draft-huque-dnsop-multi-provider-dnssec-02 Shumon Huque March 22 nd 2018

Multi Provider DNSSEC draft-huque-dnsop-multi-provider-dnssec-02 Shumon Huque March 22 nd 2018

Multi Provider DNSSEC draft-huque-dnsop-multi-provider-dnssec-02 Shumon Huque March 22 nd 2018 DNSOP Working Group, IETF101, London, U.K. Note to the DNS Camel* This document does not propose any new extensions to the DNS protocol. It

663 views • 16 slides
Securing Internet Communication: TLS & DNSSEC CS 161: Computer Security Prof. Vern Paxson

Securing Internet Communication: TLS & DNSSEC CS 161: Computer Security Prof. Vern Paxson

Securing Internet Communication: TLS & DNSSEC CS 161: Computer Security Prof. Vern Paxson TAs: Paul Bramsen, Apoorva Dornadula, David Fifield, Mia Gil Epner, David Hahn, Warren He, Grant Ho, Frank Li, Nathan Malkin, Mitar Milutinovic,

1.51k views • 92 slides
DNSSEC security without maintenance ... with the right software and registry Petr paek

DNSSEC security without maintenance ... with the right software and registry Petr paek

DNSSEC security without maintenance ... with the right software and registry Petr paek petr.spacek@nic.cz 2019-02-03 1w Redraw max 1y 6m 3m 1m 5d 1h 1d 30 ~ 19 % DNSSEC? Who cares? DNSSEC Validation Capability Metrics

433 views • 25 slides
An Extensible Platform for Evaluating Security Protocols Seny Kamara joint with L. Ballard, R.

An Extensible Platform for Evaluating Security Protocols Seny Kamara joint with L. Ballard, R.

An Extensible Platform for Evaluating Security Protocols Seny Kamara joint with L. Ballard, R. Caudy, D.Davis, F. Monrose Outline Objectives High-level architecture Plugin architecture Case studies Objectives Security

1k views • 47 slides
From DNS to DPKI a.k.a. Why secure decentralized namespaces are the future A presentation

From DNS to DPKI a.k.a. Why secure decentralized namespaces are the future A presentation

From DNS to DPKI a.k.a. Why secure decentralized namespaces are the future A presentation by Greg Slepak at Greg Slepak @taoe ff ect DNSChain / DPKI okTurtles GroupIncome Espionage Group Currency Target Audience (You) Most of

959 views • 85 slides
Elliptical Curves in DNSSEC Dmitry Kohmanyuk Hostmaster Ltd #EEDNSUA 2016 Kyiv, Ukraine

Elliptical Curves in DNSSEC Dmitry Kohmanyuk Hostmaster Ltd #EEDNSUA 2016 Kyiv, Ukraine

Elliptical Curves in DNSSEC Dmitry Kohmanyuk Hostmaster Ltd #EEDNSUA 2016 Kyiv, Ukraine Elliptic Curve Cryptography (ECC) y^2 = x^3 + ax + b http://en.wikipedia.org/wiki/Elliptic_curve

151 views • 13 slides
ilab Lab 5 DNS and DNSSec History and Motivation of DNS Problem: The Internet needs IP

ilab Lab 5 DNS and DNSSec History and Motivation of DNS Problem: The Internet needs IP

Lehrstuhl fr Netzarchitekturen und Netzdienste Institut fr Informatik Technische Universitt Mnchen ilab Lab 5 DNS and DNSSec History and Motivation of DNS Problem: The Internet needs IP addresses. Human beings do not memorize IP

779 views • 23 slides

More recommend