[Dnssec-deployment] Akamai and DNSSEC - Re: Comcast

[Morizot Timothy S]

Yes, but it's not deployed in their CDN. They can DNSSEC sign zones they host, but if sites from that zone are deployed into the CDN, they can't be DNSSEC validated (treated as insecure). It's a significant issue.

________________________________
From: dnssec-deployment-bounces at dnssec-deployment.org [mailto:dnssec-deployment-bounces at dnssec-deployment.org] On Behalf Of Dan York
Sent: Tuesday, January 24, 2012 2:06 PM
To: dnssec-deployment at dnssec-deployment.org
Subject: [Dnssec-deployment] Akamai and DNSSEC - Re: Comcast

Mohan,

Does anyone know whether Akamai has any plans for DNSSEC ? This seems
to be a big hurdle now..

In doing some research recently I found that Akamai has DNSSEC listed as part of their Enhanced DNS services:

http://www.akamai.com/html/solutions/edns_dnssec.html

They announced this in August 2010:

http://www.akamai.com/html/about/press/releases/2010/press_080910.html

and I found a presentation from the March 2011 ICANN Silicon Valley workshop about their implementation:

http://svsf40.icann.org/meetings/siliconvalley2011/presentation-dnssec-akamai-16mar11-en.pdf

Regards,
Dan

--
Dan York
Senior Content Strategist, Internet Society
york at isoc.org<mailto:york at isoc.org>   +1-802-735-1624
Jabber: york at jabber.isoc.org<mailto:york at jabber.isoc.org>
Skype: danyork   http://twitter.com/danyork

http://www.internetsociety.org/deploy360/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://dnssec-deployment.org/pipermail/dnssec-deployment/attachments/20120124/9c8c71a1/attachment.html