APNIC starts third phase of DNSSEC deployment

APNIC, which provides Internet addressing services to the Asia Pacific region, is now in phase three of its DNSSEC deployment, in which it will introduce its members’ DNSSEC data.  In previous phases, the group conducted a DNSSEC platform test and signed its zones.  In the new phase, the announcment notes, members can “enable DNSSEC protection to their reverse zones by registering Delegation Signer (DS) resource records to their parent zone data that is stored in APNIC’s name servers. The phase 3 addition to MyAPNIC’s reverse delegation screen is an optional field that allows Members to enter the DS record when they are ready to implement DNSSEC.”

, ,

No Comments

NTIA issues report, signals intent to complete root zone signing

The National Telecommunications and Information Administration of the U.S. Department of Commerce has published notice in the Federal Register (PDF) today announcing that its testing and evaluation report on DNSSEC is available, and indicating the agency intends to proceed “with the final stages of DNSSEC deployment in the authoritative root zone.”  The public is invited to review and comment on the report and the final steps in signing the root zone. Comments will be posted on the agency’s website.

No Comments

DNSSEC deployed in .US; .BIZ shortly to follow, Neustar says

Neustar announced today that DNSSEC has been deployed in the .US zone, and says that it is ready to accept Delegation Signer  records. The .BIZ zone will be signed next, with DS record accepted as early as July 15, 2010.  As a result, it will be “the  second gTLD to be fully DNSSEC-enabled.”


Update – The .BIZ domain was signed on August 7, 2010.

, , , ,

3 Comments

First root zone KSK ceremony set

CircleID reports on details of the first ICANN key signing key ceremony — at which ” first root zone KSK will be initialised and the first production KSR will be processed” — to be held June 16 in Culpeper, Virginia.  The post notes:

…since this event has generated significant interest, we have made additional space available in an adjacent room for observers who wish to attend the event. Observers will be able to watch the proceedings within the ceremony room in real-time using a closed-circuit audio-visual feed from the ceremony room, and staff will be available to answer questions those attending might have about what they are seeing.

No Comments

TERENA Networking Conference features June 3 DNSSEC session

A half-day workshop on DNSSEC is scheduled for Thursday, June 3, at the TERENA Networking Conference, TNC 2010, in Lithuania.  Starting at 1:30 local time/MET, the workshop panelists will examine an introduction to DNSSEC, open source and commercial solutions, and hands-on experiences.  Go here for a live video and audio stream, and a recording will be available after the event.  A Google Wave also will be available for remote participation.

No Comments

InfoWorld CTO 25 Awards cite Mohan for DNSSEC leadership

InfoWorld’s 2010 CTO 25 Awards include Ram Mohan of Afilias for his leadership in DNSSEC deployment. Mohan’s citation notes the work Afilias has done on behalf of the Public Interest Registry and .org, and says that he:

…set the strategy and architected the deployment of DNSSec at PIR allowing for all 7.5 million .org domain names to be accessed without being hijacked on the Internet. Mohan has also established a technology strategy to support the rollout of DNSSec for the other top-level domains in 10 countries, and for the global top-level domain registries that Afilias supports, which together account for more than 15 million domains. This has set a standard for DNSSec deployment worldwide.

No Comments

Packed agenda for DNSSEC workshop at ICANN Brussels meeting

A packed agenda is planned for the DNSSEC Workshop at the ICANN Meeting in Brussels, Belgium, to be held Wednesday, 23 June 2010 from 9:00 a.m. to 1:30 p.m. (local time).   The discussion will include such topics as DNSSEC deployment around the world, operational Issues with DNSSEC, using data and getting it out, tool development, and activities from the region.  The session, which comes shortly after the expected signing of the root zone, also will include an update on that topic.

No Comments

Deployment webinar offered June 9

“Lessons from the Trenches: Deploying DNSSEC” is an Afilias webinar targeting country code top-level domain registries with an hour of “key questions to ask yourself when deciding upon DNSSEC deployment parameters and timeline”  and “infrastructure changes required for your registry and DNS systems to support DNSSEC.”

Scheduled for 11:00 am EDT on June 9, the webinar speakers include Initiative partner and Shinkuro CEO Steve Crocker, along with John Kane, vice president, corporate services and Ram Mohan, vice president and chief technology officer, Afilias; Rickard Bellgrim of the .SE registry; and Lauren Price of .ORG and the Public Interest Registry.   Registration is required.

No Comments

ICANN announces change to root deployment schedule

ICANN will delay by two weeks–to July 15–the scheduled July 1 deployment of DNSSEC at the root zone.  On that date, ICANN will distribute a “validatable, production, signed root zone” and publish a trust anchor. The announcement noted:

The schedule change is intended to allow ICANN and VeriSign an additional two weeks for further analysis of the DURZ rollout, to finalise testing and best ensure the secure, stable and resilient implementation of the root DNSSEC production processes and systems

No Comments

This summer: Steps Toward DNSSEC

Afilias Executive Vice President and CTO Ram Mohan offers this Circle ID post on “More Stepping Stones Before This Summer’s Seminal DNSSEC Events.”  From the post:

We will now get to see, before a validatable root zone is published, how the DNS infrastructure will behave as more queries for DNSSEC information result in larger responses. Answers to the important question about how the DNS scales with the addition of DNSSEC will hopefully start to filter in, as well as the opportunity to watch for abnormalities in the system. The final step in the root’s DNSSEC deployment will occur in July when a validatable root zone is published.

Mohan calls on ISPs, TLD registries and application providers to encourage their technical teams to participate in DNSSEC testing as the summer progresses.  Afilias works with .org and the Public Interest Registry on its DNSSEC deployment.

, ,

No Comments