The Domain Name System (DNS) is one of the building blocks of the modern Internet. It's showing its age, though; it comes from a time when trust was the default. Now it's time to move to more secure approaches. David Gordon and Ibrahim Haddad provide a technical tutorial on DNS Security Extensions (DNSSEC), a technique for securing DNS.

Securing DNS is important in order to deal with the various threats originating from the Internet, threats that the original DNS design did not anticipate. One technique for securing DNS is through DNS Security Extensions (DNSSEC), a set of extensions to DNS that provide authenticity and integrity. In this article, we will provide an overview of DNS and DNSSEC and a step-by-step tutorial that gives you the needed instructions to secure your own DNS servers with DNSSEC.

By Ibrahim Haddad and David Gordon at ONLamp.

[ Read more ]