Weekend Project: Try Out “Bloodhound”, A Web Browser With Full DNSSEC Support
Here is a quick project to try out this weekend… download and try out the Bloodhound web browser from the DNSSEC Tools Project. This web browser is a modified version of Mozilla Firefox that supports...
View ArticleFedora 21 To Have DNSSEC Validation Enabled By Default
By way of a recent tweet from Red Hat’s Paul Wouters we learned the great news that the next release (21) of the Fedora operating system will include a DNSSEC-validating DNS resolver enabled by...
View ArticleCase Study: The Experience of Signing Go6.SI with DNSSEC
Some time ago Matthijs Mekking, one of the authors, maintainers and coders for the OpenDNSSEC project asked me why go6.si domain was not signed. My answer was that I need a short, precise and...
View ArticleVideo: BIND and DNSSEC – What Is New?
How does BIND work with DNSSEC? How easy is it to configure? What new features does it have that makes DNSSEC signing simple? How does it work as a DNSSEC-validating resolver? To answer these...
View ArticleAre You Protected By DNSSEC? A Quick Way To Check
Want a quick way to check if you have DNSSEC validation working at your site? Just go to: https://www.dnssec-tools.org/test/ You’ll see either a thumbs-up or a thumbs-down: If you get a thumbs-up...
View ArticleWhat We Learned: DNSSEC KSK Rollovers in go6lab
The short story: A KSK rollover on the OpenDNSSEC platform is easy and you should not be scared of it. The longer story: A little over a year ago, we decided in the Go6lab to start learning DNSSEC by...
View ArticleVideos And Slides Available From ICANN 54 DNSSEC Workshop
If you are interested in learning more about the current state of DNSSEC and DANE technologies, tools and deployment, the slides and videos are now available from the ICANN 54 DNSSEC activities that...
View ArticleLet’s Encrypt certificates tested in go6lab
Since the announcement of the Let’s Encrypt project, we’ve been enthusiastic about the idea of having an open and transparent Certification Authority (CA) that could show other CA’s that it’s possible...
View ArticleJoin the DNS Security team at the IETF 96 Hackathon this weekend…
If you will be in Berlin, Germany, this weekend and are interested in putting your coding or documentation skills to good use in helping make DNS more secure, please plan to join a group of about 20...
View ArticleThe Case for DNSSEC, DANE & Root Key Rollover @ APRICOT 2017
Our colleague Jan Žorž from the Deploy360 team was asked to present during the DNS/DNSSEC sessions during APRICOT 2017 last week, and this provides us with the opportunity to highlight a few of the...
View Article