DNSSEC

2-day DNSSEC course video

April 11, 2012

Olaf Kolkman (director of NLnet Labs) has given a 2 day "train-the-trainer" DNSSEC course in co-operation with the NGN. The video (in Dutch) of this course has been made available on the website of the NGN. You can also find it directly on youtube.

 

Check whether you’re ready for DNSSEC

March 16, 2011

SIDN has developed an application that lets you check whether you are ready to validate DNSSEC signatures. In a few seconds, you can find out whether the DNS resolver that your computer uses supports the DNSSEC protocol.

 

AVM FRITZ!Box supports DNSSEC

March 2011

AVM Fritz!box Fon Wlan 7340 and 7390 support DNSSEC and IPv6 after a firmware upgrade (information on AVM website). These Fritz!boxes are ADSL2-modem, gigabit-router, access point and dect-basestation in one. ISP XS4all offers Fritz!box Fon Wlan 7340 as the default modem with their DSL-accounts.

 

T-Mobile performs DNSSEC validation on mobile Internet

Februari 3, 2011

T-Mobile turned on DNSSEC validation on their resolvers for mobile Internet last year. This makes them the first Dutch telco to deliver this service to their customers.

 

SIDN launches Friends & Fans programme

November 16, 2010

'Friends & Fans' of DNSSEC can publish their public key in the .nl-zone. Supported by various manual processes, this programme will enable people who are already familiar with DNSSEC to have their DNS trust anchors added to the .nl zone.

SURFnet is the first participant in this program with surfnet.nl and gigaport.nl signed and anchored.

 

Trust Anchor for .NL published

November 11, 2010

Publication of the DS (Delegation Signer) for .NL in the root zone allows for validation of the .nl-domain.

 

End of Life Notice for Interim Trust Anchor Repository (ITAR)

November 4, 2010

ICANN anounces retirement of ITAR service. No new entries will be accepted and the service will be fully retired in January 2011.

 

Resolvers ask for DNSSEC

September 6, 2010

Over half of the clients request DNSSEC information, RIPE statistics show.

 

.NL signed

August 23, 2010

Last night at 00:25:47 the .nl zone was signed with DNSSEC for the 1st time! One of the safest and 3rd largest ccTLD has become even safer.

 

New IETF mailinglist 'keyassure'

August 19, 2010

The IETF mailinglist 'keyassure' discusses expanding the usage of the DNSSEC root trust anchor for other applications.

D-Link secures routers with DNSSEC

August 12, 2010

As one of the first suppliers, D-Link protects its routers with DNSSEC. (english)

 

NLnet funds DNSSEC-development

July 30, 2010

The NLnet Foundation has funding available for open source projects working on (re)designing applications to reliably use the DNSSEC-protocol. (dutch)

 

Root zone signed

July 16, 2010

On July 15, the Internet root zone was signed Creating a central trust anchor for the Internet. An account of the KSK Key Signing ceremony can be found on YouTube.

 

.org now fully supports DNSSEC

June 23, 2010

PIR, the registry for the .org top-level domain, has announced at ICANN #38 in Brussels that DNSSEC is now fully supported for the .org domain. This means that it has now become possible for registrants to directly submit DNSSEC data for inclusion in the .org zone w.r.t their domain through their registrar. PIR has published a list of registrars that support DNSSEC for .org. More information can be found in the press release by PIR.

 

SIDN presentation at InfoSecurity

March 29, 2010

SIDN has presented on DNS and DNSSEC at the InfoSecurity event in Brussels. The presentation can be found here.

 

China exports DNS problems

March 25, 2010

Security experts have researched recent problems that Californians and Chileans have been experiencing while accessing sites such as Facebook. It appears that these problems are caused by DNS manipulation. More information can be found on nu.nl (only in Dutch) , on the Fox-IT website (in English) and in this posting by DNS researcher Roy Arends.

ENISA publishes DNSSEC good practices

March 1, 2010

ENISA, the European Organisation for Network Security, has published a document containing a set of DNSSEC good practices. Read more on their site.

 

Wiki added to DNSSEC.nl platform website

February 25, 2010

The DNSSEC.nl platform website has been extended with a Wiki. This Wiki can be used to share experiences and knowledge about DNSSEC and to discuss the issues identified by the platform. The Wiki can be found here.

 

Portugal deploys DNSSEC

Januari 15, 2010

The Portuguese top-level registry has announced that the .pt zone is now signed using DNSSEC. Read more about their deployment on their site.

 

Issues updated

Januari 5, 2010

On December 16th there was a core design team meeting where the list of issues was discussed. As a result of this discussion, the issue list has been updated.

 

SIDN presentation available

December 9, 2009

Antoin Verschuren gave a technical presentation on the status-quo w.r.t. DNSSEC for the .nl domain. If you were unable to attend and are interested you can download the presentation below. The presentation is only available in Dutch.

Download the presentation

SIDN has also made a document available that details SIDN's points of view w.r.t. DNSSEC for the .nl ccTLD (only available in Dutch):

Download the document with SIDN's points of view w.r.t. DNSSEC for .nl

SIDN will sign .nl

December 7, 2009

SIDN announced in a press-release that it is going to sign the .nl ccTLD. This means that the DNSSEC protocoi will now also be deployed in The Netherlands. SIDN has indicated that it intends to sign the .nl zone one month after the signed root zone becomes publicly available (planned for July 2010). Read more...

 

DNSSEC use up 300%

December 4, 2009

In an article in Computable, IPAM-vendor InfoBlox announced that they have performed research to determine the use of DNSSEC on the Internet. This research shows that DNSSEC use has grown with 300% in 2009. There is also an English version of this article available: read more...