Embed Size (px)
Citation preview
DNSSEC WorkshopDan York, Internet Society | ICANN 55 | March 2016
| 2
Remote Participation
Slides and audio streams at:• https://meetings.icann.org/en/marrakech
55/schedule/wed-dnssec
Live video stream via YouTube at:• http://bit.ly/dnssec55am• http://bit.ly/dnssec55pm
| 3
Program Committee
• Steve Crocker, Shinkuro, Inc.• Mark Elkins, DNS/ZACR• Cath Goulding, Nominet• Jean Robert Hountomey, AfricaCERT• Jacques Latour, CIRA• Xiaodong Lee, CNNIC• Luciano Minuchin, NIC.AR• Russ Mundy, SPARTA, A Parsons Company• Ondřej Surý, CZNIC • Yoshiro Yoneya, JPRS• Dan York, Internet Society• Julie Hedlund and Kathy Schnitt, ICANN
| 4
Luncheon Sponsors
• Afilias• CIRA• Dyn• SIDN
• Opportunity for a fifth sponsor!
| 5
DNSSEC Implementer’s Gathering Sponsors
The Program Committee held a DNSSEC Implementers Gathering on 07 Marchsponsored by:
| 6
DNSSEC Implementer’s Gathering
Thanks to:
Who can sponsor the gathering at ICANN 56?
| 7
Support
The DNSSEC Workshop and associated activities at ICANN are an organized activity of the:
• ICANN Security and Stability Advisory Committee (SSAC)
with additional assistance from the:• Internet Society
Deploy360 Programme
| 8
Program
0900-0915–Presentation:DanYork,InternetSociety–DNSSECWorkshopIntroduction,Program,DeploymentAroundtheWorld–Counts,Counts,Counts0915-0930–Presentation:Updateonthe‘Sunset’oftheDNSSECLook-asideValidationRegistry(DLV)0930-1030–PanelDiscussion:DNSSECActivitiesintheAfricanRegion1030-1045–CoffeeBreak1045-1115–Presentation:OpenDNSSECSIGNERSwitchoverExperience1115-1145–Presentation:DNSSECAtScale1145-1200–GreatDNS/DNSSECQuiz1200-1315–LunchBreakinGrandBleu1315-1415–PanelDiscussion:DNSSECandEllipticCurveCryptography1415-1500–PanelDiscussion:DNSSECRootKeySigningKey(KSK)Rollover1500-1515–Presentation:DNSSEC-HowCanIHelp?
DNSSEC Deployment Around the World: Counts, Counts, CountsDan York, Internet Society | ICANN 55 | March 2016
TheTwoPartsofDNSSEC
Signing Validating
ISPs
Enterprises
Applications
DNSHosting
Registrars
Registries
| 1111
http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=0&r=0&w=7&r=1
| 1212
http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=1&r=0&w=7&r=1
| 1313
http://stats.labs.apnic.net/dnssec/XB?o=cXHw7x1g1r1
| 1414
http://stats.labs.apnic.net/dnssec/XB?o=cXHw7x1g1r1
| 1515
https://rick.eng.br/dnssecstat/
| 1616
https://rick.eng.br/dnssecstat/
Note:OnlyincludestheTLDsforwhichRickLambcangetstatistics.(Example,.GOVisnotlisted.)
| 17
TLD DNSSEC Implementation Status
Experimental – internal experimentsAnnounced – Public commitment to deployPartial – Zone is signed but not in operationDS in RootOperational – Accepting signed delegations
| 18
Note About Operational Status
Please let Dan York know if your ccTLD is now “Operational”:
• Accepting DS records from signed zones
Send updates to [email protected]
Need your help as we have no automated way of knowing Operational status.
| 19
| 20
Botswana- .BWDecember2015
| 21
Azerbaijan- .AZJanuary2016
| 22
| 23
| 24
| 25
Receiving the DNSSEC Deployment Maps
The DNSSEC Deployment Maps are published via email every Monday morning through the Internet Society Deploy360 Programme. To subscribe, visit:
www.internetsociety.org/deploy360/dnssec/maps/
| 26
DNSSEC Event Calendar
New calendar to track DNSSEC/DANE-related events. Two views – event listing:
https://www.dnssec-deployment.org/events/
Calendar view:
http://www.dnssec-deployment.org/calendar/
Send event submissions to [email protected]
| 27
IETF 95 Hackathon
Sat/Sun, Apr 2/3 – Buenos Aires – IETF 95
• https://www.ietf.org/hackathon/95-hackathon.html
• https://www.ietf.org/registration/MeetingWiki/wiki/95hackathon
• Opportunity to work on new tools or services for DNSSEC / DANE / DNS Privacy
• Join us!
| 28
DNSSEC History Project
The DNSSEC History Project is an ongoing project to collect and record the history of the work that went into bringing about the deployment of DNSSEC. To view – or to contribute – please see:
https://wiki.tools.isoc.org/DNSSEC_History_Project
Thank you and Questions
Dan York, Internet Society | ICANN 55 | March 2016
