Presentations, howtos --------------------- · Overview of published DNSSEC presentations (long!) http://www.dnssec.net/presentations · Two very good and thorough howtos on DNSSEC http://nlnetlabs.nl/dnssec_howto/ http://www.hznet.de/dns/dnssec-decix050916.pdf Testbeds -------- · IANA root signing experiment https://ns.iana.org/dnssec/status.html · .NL experiment http://www.xtdnet.nl/paul/dnssec/ Adoption, deployment and statistics ----------------------------------- · World wide DNSSEC deployment http://www.xelerance.com/dnssec/ · DNSSEC global deployment trends http://utility.nokia.net/~lars/meter/dnssec.html · DNS server survey http://dns.measurement-factory.com/surveys/200710.html http://www.theregister.co.uk/2007/11/20/dns_security_survey/ RFCs ---- · RFC4033 - DNSSEC Security Introduction and Requirements http://www.ietf.org/rfc/rfc4033.txt · RFC4034 - Resource Records for the DNS Security Extensions http://www.ietf.org/rfc/rfc4034.txt · RFC4035 - Protocol Modifications for the DNS Security Extensions http://www.ietf.org/rfc/rfc4035.txt · RFC5011 - Automated Updates of DNS Security (DNSSEC) Trust Anchors http://www.ietf.org/rfc/rfc5011.txt · RFC2671 - Extension Mechanisms for DNS (EDNS0) http://www.ietf.org/rfc/rfc2671.txt · RFC3658 - Delegation Signer (DS) Resource Record (RR) http://www.ietf.org/rfc/rfc3658.txt Trusted anchor keys for a few zones ----------------------------------- · .SE http://dnssec.nic.se/ · ripe.net https://www.ripe.net/projects/disi/keys/ripe-ncc-dnssec-keys-new.txt Misc ---- · Getting secondary for DNSSEC signed zones http://www.dnssec-deployment.org/zones/