|
Invited Talk
Time: Thursday 18 May 2006 12:00 - 12:45 Location: Collegezaal A
DNSSEC Deployment -- The path forward | ||
| Abstract Spoofing of domain names and poisoning of caches continues to be a favored mode of attack in both local nets and across the global Internet. The DNS Security protocol (DNSSEC) is intended to improve protection against these attacks. The protocol was published a year ago (RFCs 4033, 4034, 4035) and deployment is in the early stages. The deployment process is rather more interesting than most deployments because its intertwined with both chicken-and-egg issues and a few political issues. In this talk I will outline the main pieces of the road map for deployment of DNSSEC and offer an assessment of both the bottlenecks and opportunities for early deployment. One of the most important indicators of progress is the signing of the root zone and the signing of the top level domains. Sweden signed its top-level domain a few months ago. .COM, .NET and .ORG are running test beds. Signing of the root zone is getting considerable attention and I will give an update on the progress there. And tools are beginning to emerge... |
|
|
Last modified: Mon, 23 Jan 2006 22:36:51 +0100