General information
- Find everything you ever wanted to know about DNSSEC on dnssec.net
- The SURFnet whitepaper explains the use and necessity of DNSSEC
- SURFnet has a very informational blog on DNSSEC
DNSSEC deployment
- DNSSEC deployment in the DNS root zone (ICANN)
- ICANN deployment statistics for all TLD's
- Wikipedia tracks DNSSEC deployment in TLD's
Tools and debuggers
- Check for valid DNSSEC records for websites displayed in your browser window With this Firefox add-on.
- DNSviz is a great tool for visualizing the chain of trust graphically.
- DNSCheck by SIDN tests the DNS configuration of a domain (including DNSSEC and IPv6)
- Verisign offers a DNSSEC debugger that includes the chain of trust en has a zone validation script in Perl.
- DNSdroid: a DNS health checker for Android
Hints and guides
- NIST has published a 'Secure DNS Deployment Guide' that also covers DNSSEC
- Registrar Implementation Cheat Sheet by Sparta and Shinkuro
- Whatever you do - practice safe DNS! (Campaign by PIR, the .org registry)
This and more usefull information on various aspects of DNSSEC in the links-section:
DNSSEC deployment in the DNS root zone on the ICANN site on signing the root
The SURFnet whitepaper explains the use and necessity of DNSSEC