DNS/DNSSEC Tutorial

DNSSEC is an update to the traditional DNS system. DNSSEC uses public-key cryptography to update the DNS trust model to ensure verifiable DNS responses to requests from clients.

In this 1/2 day tutorial we will cover the following:

• Problems with insecure DNS
• The basics of DNSSEC, one solution available now
• The new resource record sets, the extensions to the protocol

Attendees will see a hands-on demonstration of securing a zone using DNSSEC. This will include key generation, updating of the zone file, configuration of a forwarding resolver, publishing the zone and verification of the newly signed zone. Step-by-step instructions will be made available to all attendees with laptops, who want to follow along.