DNSSEC security without maintenance
... with the right software and registry
- Track: DNS devroom
- Room: K.4.601
- Day: Sunday
- Start: 15:10
- End: 15:40
We will show how to use open-source DNS server "Knot DNS" to automatically sign and maintain DNS zones, and how to automate DNSSEC maintenance.
Today DNSSEC technology is mature and automation tools are available for all tasks.
In this talk we will show how to use open-source DNS server "Knot DNS" to sign your DNS zone and publish keys with little effort, and how to automate DNSSEC key management using CDS/CDNSKEY technology (RFC 8078).
Speakers
| Petr Špaček |