Introduction to DNSSEC

Add to your list(s) Download to your calendar using vCal

• Tony Finch, University of Cambridge Computing Service
• Tuesday 25 February 2014, 15:00-16:00
• Lecture Theatre 2, Computer Laboratory, William Gates Building.

If you have a question about this talk, please contact Markus Kuhn.

Abstract: This talk is a quick introduction to DNSSEC , the Domain Name System Security extensions. DNSSEC is interesting because it does more than just add tamper-proofing to the DNS : it is also a new public-key infrastructure.

The talk will describe the security features that DNSSEC adds (and does not add) to the DNS , and how the DNSSEC PKI can support other protocols such as SSL /TLS and SSH .

To be useful, DNSSEC needs to be widely deployed. The talks will demonstrate that switching on DNSSEC can be straight-forward, and will mention some of the traps and pitfalls that can catch the unwary.

Talk slides and materials are at http://www-uxsup.csx.cam.ac.uk/~fanf2/dns/nws42/

Bio: Tony Finch is a system administrator and developer in the University of Cambridge Information Services (until recently known as the Computing Service) where he helps to run the mail and DNS systems. He has contributed to a number of open source projects including Exim, BIND , SpamAssassin, FreeBSD, Apache httpd, and git. He participates in a number of IETF working groups related to mail and DNS , and has contributed draft documents to the DANE working group.

He is mildly notorious for his email address dot@dotat.at, and can be found online at http://dotat.at/ http://fanf.livejournal.com https://twitter.com/fanf

This talk is part of the Computer Laboratory Security Seminar series.

This talk is included in these lists:

• All Talks (aka the CURE list)
• Cambridge talks
• Computer Laboratory Security Seminar
• Department of Computer Science and Technology talks and seminars
• Interested Talks
• Lecture Theatre 2, Computer Laboratory, William Gates Building
• School of Technology
• Security-related talks
• Trust & Technology Initiative - interesting events
• bld31

Note that ex-directory lists are not shown.