Clik here to view.
Code Examples: Checking the DNSSEC Status Of A Large Number of Domains
Do you want to check the DNSSEC status of a large number of domains? To know whether they are signed or unsigned? Or perhaps if any of the domains are failing validation? Yesterday at the DNSSEC...
View ArticleClik here to view.
New Release 1.14 of DNSSEC-Tools – Get It Now!
Recently at the ICANN 45 DNSSEC Deployment Workshop, we learned that the great folks over at the DNSSEC Tools project had just released a new version of their great package of DNSSEC-related tools....
View ArticleClik here to view.
Slides – Adding DNSSEC to Fedora and Red Hat Linux
What is the status of DNSSEC being added to Fedora and Red Hat Linux? What changes have already been made? What changes will occur in the future? What tools are available to help? At the recent...
View ArticleHash-slinger – a tool for creating TLSA records for the DANE protocol
Hash-slinger is a package of tools created by Paul Wouters of RedHat to make it easy to create records for the DANE protocol that will allow you to secure your SSL/TLS certificates using DNSSEC. The...
View ArticleHash-slinger Helps You Easily Create TLSA records for DNSSEC / DANE
If you are looking to get started with the DANE protocol to provide higher security for SSL/TLS certificates, a basic question can be – how do you generate a TLSA record to put in your DNS zone file?...
View ArticleClik here to view.
Weekend Project: Add DNSSEC Validation to an OpenWRT WiFi Device
Looking for a weekend project? Do you use a WiFi access point based on OpenWRT? If so, here are some quick instructions about how to install the Unbound DNS resolver that supports DNSSEC validation...
View ArticleClik here to view.
PowerDNS Releases Version 3.2 With Increased DNSSEC Support
Congratulations to Bert Hubert and the rest of the team at PowerDNS for their release 3.2 last Thursday that, if you scroll down through the release announcement and changelog is pretty much mostly...
View ArticleClik here to view.
Huge News For Internet Security – Google Public DNS Is Now Performing DNSSEC...
In a huge step forward for Internet security today, Google announced that Google’s “Public DNS” service is now performing DNSSEC validation. What this means is that anyone using Google’s DNS servers...
View ArticleClik here to view.
Google Public DNS – DNSSEC Validation
Google provides DNSSEC validation through the use of their “Google Public DNS” servers. If your local DNS resolvers do not perform DNSSEC validation, you can change your operating system to point to...
View ArticleClik here to view.
Google Clarifies DNSSEC Support – Opt In Now, Full Validation Coming Soon
After Google’s announcement earlier this week of DNSSEC validation support in their Public DNS service, there was some concern and discussion in various DNSSEC mailing lists about the fact that DNSSEC...
View ArticleDNS Servers Supporting DNSSEC
When you install a DNS “server” on your network, it generally acts as either: 1) an “authoritative server” serving out DNS records on behalf of a zone; or 2) a “recursive nameserver” (also called a...
View ArticleClik here to view.
Want To Quickly Create A TLSA Record For DANE / DNSSEC?
Would you like to use the DANE protocol to secure your SSL/TLS certificate via DNSSEC? If so, the first step is to generate and publish a “TLSA record” in DNS – and that record generation can be a...
View ArticleVideo – ENOG6: DNSSEC and DANE Deployment Trends, Tools And Challenges
What are DNSSEC and DANE all about? What advantages do they have? What tools are out there to help? Back in October I spoke at the ENOG 6 event in Kiev, Ukraine, about DNSSEC deployment trends and...
View ArticleClik here to view.
Weekend Project: Install The DNSSEC/TLSA Validator for Chrome, Firefox, more
How do you know if a website has a domain signed by DNSSEC? Here’s another quick weekend project, very similar to last weekend’s project , where you can add support to your web browsers to know the...
View ArticleClik here to view.
NLnet Labs Releases Helpful DNSSEC Infrastructure Audit Framework
How secure is your DNSSEC infrastructure? If you operate a registry for a top-level domain (TLD) or if you are a DNS operator providing DNSSEC signing services, how secure are your operations? And how...
View ArticleClik here to view.
Weekend Project: Test Out New DNSSEC Support In Dnsmasq
If you run your own small network and are comfortable working with Linux, Android, *BSD, Solaris or Mac OS X, here’s a great way you could help advance DNSSEC: Simon Kelley is looking for people to...
View ArticleClik here to view.
Are There More (or Newer) DNSSEC / DANE Application Developer Libraries We...
What developer libraries / modules are you using to add DNSSEC or DANE support to your applications? For some time now we’ve maintained a list of DNSSEC developer libraries at:...
View ArticleClik here to view.
NIST Offers New Tool To Verify TLSA Records For DANE / DNSSEC
Are you experimenting with using the DANE protocol to provide an additional layer of security to your TLS/SSL certificates via DNSSEC? Would you like to easily test that your TLSA record needed for...
View ArticleClik here to view.
Weekend Project: Add DKIM / DNSSEC Verifier To Thunderbird
Here’s an interesting weekend project if you use Mozilla Thunderbird as your email client – add the DKIM Verifier add-on to ensure the validity of signatures on email messages. The connection to...
View ArticleClik here to view.
Weekend Project: Try Out “Bloodhound”, A Web Browser With Full DNSSEC Support
Here is a quick project to try out this weekend… download and try out the Bloodhound web browser from the DNSSEC Tools Project. This web browser is a modified version of Mozilla Firefox that supports...
View Article