[Dshield] DNSSEC for DShield.org Diary Entry

Jon Kibler Jon.Kibler at aset.com
Thu Aug 14 15:15:51 GMT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Johannes,

I tried to post these questions as comments to the Diary entry, but they
never showed up. (For some reason, my comments never seem to show up.)

Questions regarding your diary entry:

- -- What are you using as a trust anchor?

- -- Were you able to get your register accept your DLV zone?

- -- If not, are you using ISC's DLV registry?

- -- Can you give more specifics on how you were able to get the DLV set
up and accepted by either your registrar or ISC (or other third-party DLV)?

END OF QUESTIONS


For everyone else, a great resource I found when trying to set up DNSSEC
were:
   http://www.isc.org/sw/bind/docs/DNSSEC_in_6_minutes.pdf

I have not gotten as far as Johannes appears to have (I have about 20
domains and 160 zones), so I am looking for guidance / suggestions on
how to handle getting the domain-level zones trusted by a 'parent.'

THANKS for any help / suggestions!

Jon Kibler
- --
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
c: 843-224-2494
s: 843-564-4224

My PGP Fingerprint is:
BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkikTCcACgkQUVxQRc85QlNqNACeLf3wPRbZjovG+or+qKlHNbFG
54oAn1wDgwviQZ8FSfbPTMRilVHo3pbc
=ZjRL
-----END PGP SIGNATURE-----




=========================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.



More information about the Dshield mailing list