chris
Top Contributor
For anyone interested in DNSSEC, auDA are conducting a 4 month trial starting this week:
You can read more at:
http://www.ausregistry.com.au/news/auda-trial-dnssec-in-au
A mailing list has been setup for announcements:
http://www.lists.auda.org.au/mailman/listinfo/dnssec-announce
Cheers,
Chris
Deployment on production servers will commence during April and will be trialed for four months. During this period auDA will:
DNSSEC is a technology that was developed to protect against DNS-based attacks and hijacks by digitally signing data so you can be assured it is valid. In order to eliminate this form of vulnerability from the Internet, DNSSEC must be deployed at each step in the DNS lookup process from root zone to final domain name. Importantly, DNSSEC does not encrypt data. It just attests to the validity of the address of the site you visit.
- Test and monitor production load on the .au servers
- Perform two zone signing key rollover events
- Perform one key signing key rollover
- Liaise with the Second Level Domain (2LD) operators and facilitate the addition of their DS records into the .au zone
- Finalise the DNSSEC Practice Statement (DPS).
In auDA’s test, the .au delegation signer records will not be added to the root zone during this period and auDA notes that operators should not create or implement trust anchors for .au in their production environments.
You can read more at:
http://www.ausregistry.com.au/news/auda-trial-dnssec-in-au
A mailing list has been setup for announcements:
http://www.lists.auda.org.au/mailman/listinfo/dnssec-announce
Cheers,
Chris