DNSSEC Validator - Cz.NIC

ePAPER READ

DOWNLOAD ePAPER

nic.cz

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

START NOW

Motivation● DNSSEC is invisible:– to end user– to domain holder● Idea came up when using ASnumber Add-On– Shows ASN and some more info– Credits to the clone Ondrej– Coding by Zbynek Michl @ CZ.NIC Labs2

BezpeÄnÃ© domÃ©ny pro bezpeÄnÃ© elektronickÃ© sluÅ¾by ... - Cz.NIC

DNSSEC Validator● Mozilla Firefox Add-On● Four visible DNSSEC states:– Green Key – validated (AD)– Orange Key – could validate (RRSIG, no AD)– Red Key – validation failure (invalid RRSIG)– No Key – no DNSSEC (no RRSIG, no AD)3

Page 1: DNSSEC ValidatorCZ.NIC LabsOndřej
Page 5 and 6: RIPE 60 has validating resolvers!5
Page 7 and 8: But you can use ours7
Page 9 and 10: Does your ISP do DNSSEC?9
Page 11 and 12: You get “some” security11
Page 13 and 14: Where to get it?● Nice new shiny
Page 15 and 16: Known issues in 0.15.1● Windows X

DNSSEC Validator - Cz.NIC

Create successful ePaper yourself

Delete template?

Save as template?