|When:||Monday, 25 February 2013|
|Time:||9:00 - 12:30 (UTC +8)|
|Where:||Azalea (White & Pink)|
|Presenters:||Phil Regnauld & Hans Kuhn (NSRC)|
DNSSEC is an update to the traditional DNS system. DNSSEC uses public-key cryptography to update the DNS trust model to ensure verifiable DNS responses to requests from clients.
In this 1/2 day tutorial we will cover the following:
- Problems with insecure DNS
- The basics of DNSSEC, one solution available now
- The new resource record sets, the extensions to the protocol
Attendees will see a hands-on demonstration of securing a zone using DNSSEC. This will include key generation, updating of the zone file, configuration of a forwarding resolver, publishing the zone and verification of the newly signed zone. Step-by-step instructions will be made available to all attendees with laptops, who want to follow along.