**Domain Name System Security Extensions (DNSSEC)** is a set of IETF specifications for digitally signed DNS.

learn more… | top users | synonyms

11
votes
0answers
144 views

DNSSEC signing algorithms

Virtualmin supports a flurry of algorithms for DNSSEC: RSASHA1, RSASHA256, RSAMD5, DSA, DH, HMAC-MD5, NSEC3RSASHA1, NSEC3DSA. If I understand correctly, there's Proof of Concept available for SHA1 ...
1
vote
0answers
39 views

Does DNSSEC provide signed statements that a certain domain does NOT yet support DNSSEC? If not, why not?

In my security class with David Wagner, we talked about some of the reasons why DNSSEC is not widely adopted right now. One of the reasons was that for backward compatibility reasons, clients need to ...
0
votes
0answers
26 views

Root Zone Trust Anchor Publication?

I'm reading through DNSSEC Trust Anchor Publication for the Root Zone. Section 4 lists two methods to distribute the root keys: HTTP and HTTPS. Fetching over HTTP is not secure, and fetching over ...