DNSSEC Workshop - ICANN...0915-0930 – Presentation: Update on the ‘Sunset’ of the DNSSEC...

DNSSEC WorkshopDan York, Internet Society | ICANN 55 | March 2016

| 2

Remote Participation

Slides and audio streams at:• https://meetings.icann.org/en/marrakech

55/schedule/wed-dnssec

Live video stream via YouTube at:• http://bit.ly/dnssec55am• http://bit.ly/dnssec55pm

| 3

Program Committee

• Steve Crocker, Shinkuro, Inc.• Mark Elkins, DNS/ZACR• Cath Goulding, Nominet• Jean Robert Hountomey, AfricaCERT• Jacques Latour, CIRA• Xiaodong Lee, CNNIC• Luciano Minuchin, NIC.AR• Russ Mundy, SPARTA, A Parsons Company• Ondřej Surý, CZNIC • Yoshiro Yoneya, JPRS• Dan York, Internet Society• Julie Hedlund and Kathy Schnitt, ICANN

| 4

Luncheon Sponsors

• Afilias• CIRA• Dyn• SIDN

• Opportunity for a fifth sponsor!

| 5

DNSSEC Implementer’s Gathering Sponsors

The Program Committee held a DNSSEC Implementers Gathering on 07 Marchsponsored by:

| 6

DNSSEC Implementer’s Gathering

Thanks to:

Who can sponsor the gathering at ICANN 56?

| 7

Support

The DNSSEC Workshop and associated activities at ICANN are an organized activity of the:

• ICANN Security and Stability Advisory Committee (SSAC)

with additional assistance from the:• Internet Society

Deploy360 Programme

| 8

Program

0900-0915–Presentation:DanYork,InternetSociety–DNSSECWorkshopIntroduction,Program,DeploymentAroundtheWorld–Counts,Counts,Counts0915-0930–Presentation:Updateonthe‘Sunset’oftheDNSSECLook-asideValidationRegistry(DLV)0930-1030–PanelDiscussion:DNSSECActivitiesintheAfricanRegion1030-1045–CoffeeBreak1045-1115–Presentation:OpenDNSSECSIGNERSwitchoverExperience1115-1145–Presentation:DNSSECAtScale1145-1200–GreatDNS/DNSSECQuiz1200-1315–LunchBreakinGrandBleu1315-1415–PanelDiscussion:DNSSECandEllipticCurveCryptography1415-1500–PanelDiscussion:DNSSECRootKeySigningKey(KSK)Rollover1500-1515–Presentation:DNSSEC-HowCanIHelp?

DNSSEC Deployment Around the World: Counts, Counts, CountsDan York, Internet Society | ICANN 55 | March 2016

TheTwoPartsofDNSSEC

Signing Validating

ISPs

Enterprises

Applications

DNSHosting

Registrars

Registries

| 1111

http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=0&r=0&w=7&r=1

| 1212

http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=1&r=0&w=7&r=1

| 1313

http://stats.labs.apnic.net/dnssec/XB?o=cXHw7x1g1r1

| 1414

http://stats.labs.apnic.net/dnssec/XB?o=cXHw7x1g1r1

| 1515

https://rick.eng.br/dnssecstat/

| 1616

https://rick.eng.br/dnssecstat/

Note:OnlyincludestheTLDsforwhichRickLambcangetstatistics.(Example,.GOVisnotlisted.)

| 17

TLD DNSSEC Implementation Status

Experimental – internal experimentsAnnounced – Public commitment to deployPartial – Zone is signed but not in operationDS in RootOperational – Accepting signed delegations

| 18

Note About Operational Status

Please let Dan York know if your ccTLD is now “Operational”:

• Accepting DS records from signed zones

Send updates to york@isoc.org

Need your help as we have no automated way of knowing Operational status.

| 19

| 20

Botswana- .BWDecember2015

| 21

Azerbaijan- .AZJanuary2016

| 22

| 23

| 24

| 25

Receiving the DNSSEC Deployment Maps

The DNSSEC Deployment Maps are published via email every Monday morning through the Internet Society Deploy360 Programme. To subscribe, visit:

www.internetsociety.org/deploy360/dnssec/maps/

| 26

DNSSEC Event Calendar

New calendar to track DNSSEC/DANE-related events. Two views – event listing:

https://www.dnssec-deployment.org/events/

Calendar view:

http://www.dnssec-deployment.org/calendar/

Send event submissions to york@isoc.org

| 27

IETF 95 Hackathon

Sat/Sun, Apr 2/3 – Buenos Aires – IETF 95

• https://www.ietf.org/hackathon/95-hackathon.html

• https://www.ietf.org/registration/MeetingWiki/wiki/95hackathon

• Opportunity to work on new tools or services for DNSSEC / DANE / DNS Privacy

• Join us!

| 28

DNSSEC History Project

The DNSSEC History Project is an ongoing project to collect and record the history of the work that went into bringing about the deployment of DNSSEC. To view – or to contribute – please see:

https://wiki.tools.isoc.org/DNSSEC_History_Project

Thank you and Questions

Dan York, Internet Society | ICANN 55 | March 2016