Securing the Debian zones
Feb 16, 2010, 20:33 (0 Talkback[s])
Re-Imagining Linux Platforms to Meet the Needs of Cloud Service Providers
"We are in the process of deploying DNSSEC, the DNS Security
Extensions, on the Debian zones. This means properly configured
resolvers will be able to verify the authenticity of information
they receive from the domain name system.
"The plan is to introduce DNSSEC in several steps so that we can
react to issues that arise without breaking everything at once.
"We will start with serving signed debian.net and debian.com
zones. Assuming nobody complains loudly enough the various reverse
zones and finally the debian.org zone will follow. Once all our
zones are signed we will publish our trust anchors in ISC's DLV
Registry, again in stages."