Securing the Debian zones

"We are in the process of deploying DNSSEC, the DNS Security Extensions, on the Debian zones. This means properly configured resolvers will be able to verify the authenticity of information they receive from the domain name system.

"The plan is to introduce DNSSEC in several steps so that we can react to issues that arise without breaking everything at once.

"We will start with serving signed debian.net and debian.com zones. Assuming nobody complains loudly enough the various reverse zones and finally the debian.org zone will follow. Once all our zones are signed we will publish our trust anchors in ISC's DLV Registry, again in stages."

Complete Story

Related Stories:

• OpenDNSSEC 1.0.0 released(Feb 10, 2010)
• Google wants to see client addresses in DNS queries(Jan 29, 2010)
• DNSSEC Compromised Again?(Jan 22, 2010)
• DNSSEC under attack?(Nov 30, 2009)
• What DNS Is Not(Nov 09, 2009)
• Open-source Project Aims to Makes Secure DNS Easier(Jul 31, 2009)