Questions tagged [dnssec]
Domain Name System Security Extensions (DNSSEC) is a set of IETF specifications for digitally signed DNS.
11
questions with no upvoted or accepted answers
3
votes
0
answers
1k
views
Do I need DNSSEC from GoDaddy?
I just registered a co.uk domain with GoDaddy. I've been managing domains for a few years now, and hosting my own website. I know a bit, but not enough to be safe with anything important like this.
...
- 940
1
vote
0
answers
123
views
How to validate DNSSEC signatures - zone cuts?
RFC 4035, section 5.3.1 lays out the rules for validating DNSSEC RRSIG records:
The RRSIG RR and the RRset MUST have the same owner name and the same class.
The RRSIG RR's Signer's Name field MUST be ...
1
vote
0
answers
88
views
Tooling and serialization format for DNSSEC signture chain
I'm looking for a compact, canonical (and possibly but not necessarily human-readable) format for serializing the signature chain for a RRset (or proof that it lies under an insecure delegation) for ...
1
vote
0
answers
69
views
Supplying registrar with dnssec related records
I have a domain name under .money, which supports DNSSEC.
However, my registrar hasn't done DNSSEC with this TLD before and is asking me to supply the Key Tag, Algorithm Type, Digest Type and Digest --...
- 1,321
1
vote
0
answers
333
views
Detecting a web based MITM attack?
I've been looking into ways to detect a Man In the Middle attack, when the client has "duped" into trusting third party CA. Examples of this are, anti-virus applications and corporate ...
- 11
1
vote
0
answers
92
views
How do you mitigate the risk of stolen unencrypted data because you are using Cloud DNS to proxy the request that are sent to your server?
Goal
My goal is to build a PWA. I am new to programming and I believe it is better to start with NGINX.
I have not found a good article (explaining the security risk) about using the Cloud DNS (such ...
1
vote
1
answer
184
views
How does DNSCurve protect against forgery in a man-in-the-middle attack scenario?
This Question is about DNSCurve. I thought of DNSCurve as "HTTPS for DNS" (like in this Answer) but had some resent thoughts about the trust-relationship between resolvers and nameservers serving the ...
- 11
1
vote
0
answers
2k
views
Vulnerability NTP:Traffic amplification in clrtrap feature of ntpd affect or not affect to Cisco device?
I am using CCSVM tool SCAN for Network devices (Cisco). Below you can find the scan result:
Title vulnerability: NTP: Traffic amplification in clrtrap feature of
ntpd Solution fix: Disable NTP ...
- 11
0
votes
0
answers
160
views
DNSSEC Client Validation - The Last Mile in DNSSEC
When a Windows computer wants to resolve a domain name, it offloads the request to a DNS resolver and tells the resolver that it wants to resolve with DNSSEC (by setting the 'DO' bit in the query). ...
- 101
0
votes
0
answers
88
views
How to properly handle DNSKEY delegation across DNS zones?
I'm trying to implement a toy project DNSSEC supported DNS resolver to learn about both DNS and DNSSEC.
Most of my implementation are finished. But for some domains it's not working correctly, and I ...
- 101
-1
votes
1
answer
1k
views
DNSSEC is not configured for X website
I'm pretty new to this world of security and I'm doing some challenges trying to solve puzles of security, the thing is I have a website that is not loading it throws a timeout if I do ping, but ...
- 99