DNSSEC Deployment Initiative and Roadmap

1
DNSSEC Deployment Initiative and Roadmap

• Frederico Neves
• ltfneves_at_registro.brgt
• on behalf of the DNSSEC-Deployment group
• http//www.dnssec-deployment.org/

2
DNSSEC

• Secure extensions to the DNS system.
• Provides Authentication, Integrity and Secure
  denial of existence.
• RFCs published last week (4033, 4034, 4035).
• Specification in the 3rd version with significant
  operational input considered to be mature.
• An enabling technology for scalable internet
  security

3
DNSSEC Deployment

• Initiative started May 2004
• DNSSEC summit in Kyoto (Feb 2005)
• Physical meetings at the IETFs
• Mailing list / Teleconferences
• Objectives
• Increase awareness
• Outreach to incentive adoption
• Deployment issues tracking
• RoadMap
• Participation from ccTLDs, GTLDs, software
  vendors, goverments, etc...

4
DNSSEC RoadMap

• Live document
• First version available from the web-site
• http//www.dnssec-deployment.org/
• Participate on the effort, join the Road to
  better security, start your deployment plans NOW !

5
Agenda

• 900 Introduction DNSSEC Deployment Initiative
  and Roadmap
• Frederico Neves
• 910 DNSSEC Man-in-the-Middle Attack Demo
• Bill Manning
• 925 DNSSEC Overview, Issues and Status
• Russ Mundy
• 945 Panel on DNSSEC Plans
• Doug Barton (root) Johan Ìhren (.SE) Ed Lewis
  (.biz)
• Ram Mohan (.info) Frederico Neves (.BR)
• 1020 Some Registry DNSSEC Considerations
• Pat Kane
• 1030 Break
• Practicalities and Use Cases
• --------------------------------------
• 1045 EPP-DNSSEC Registries/Registrars Demo
• Ed Lewis
• 1100 Novel Certificate Environments and DNSSEC
• Ed Lewis / Jon Peterson