in conjunction with APRICOT 2013


When: Monday, 25 February 2013
Time: 9:00 - 12:30 (UTC +8)
Where: Azalea (White & Pink)
Presenters: Phil Regnauld & Hans Kuhn (NSRC)
Tutorial slides

DNSSEC is an update to the traditional DNS system. DNSSEC uses public-key cryptography to update the DNS trust model to ensure verifiable DNS responses to requests from clients.

In this 1/2 day tutorial we will cover the following:

  • Problems with insecure DNS
  • The basics of DNSSEC, one solution available now
  • The new resource record sets, the extensions to the protocol

Attendees will see a hands-on demonstration of securing a zone using DNSSEC. This will include key generation, updating of the zone file, configuration of a forwarding resolver, publishing the zone and verification of the newly signed zone. Step-by-step instructions will be made available to all attendees with laptops, who want to follow along.