Questions tagged [dnssec]
Domain Name System Security Extensions (DNSSEC) is a set of IETF specifications for digitally signed DNS.
12
questions with no upvoted or accepted answers
3
votes
0
answers
1k
views
Do I need DNSSEC from GoDaddy?
I just registered a co.uk domain with GoDaddy. I've been managing domains for a few years now, and hosting my own website. I know a bit, but not enough to be safe with anything important like this.
...
- 960
1
vote
0
answers
203
views
How to validate DNSSEC signatures - zone cuts?
RFC 4035, section 5.3.1 lays out the rules for validating DNSSEC RRSIG records:
The RRSIG RR and the RRset MUST have the same owner name and the same class.
The RRSIG RR's Signer's Name field MUST be ...
1
vote
0
answers
115
views
Tooling and serialization format for DNSSEC signture chain
I'm looking for a compact, canonical (and possibly but not necessarily human-readable) format for serializing the signature chain for a RRset (or proof that it lies under an insecure delegation) for ...
1
vote
0
answers
100
views
Supplying registrar with dnssec related records
I have a domain name under .money, which supports DNSSEC.
However, my registrar hasn't done DNSSEC with this TLD before and is asking me to supply the Key Tag, Algorithm Type, Digest Type and Digest --...
- 1,351
1
vote
0
answers
403
views
Detecting a web based MITM attack?
I've been looking into ways to detect a Man In the Middle attack, when the client has "duped" into trusting third party CA. Examples of this are, anti-virus applications and corporate ...
- 11
1
vote
0
answers
117
views
How do you mitigate the risk of stolen unencrypted data because you are using Cloud DNS to proxy the request that are sent to your server?
Goal
My goal is to build a PWA. I am new to programming and I believe it is better to start with NGINX.
I have not found a good article (explaining the security risk) about using the Cloud DNS (such ...
1
vote
1
answer
242
views
How does DNSCurve protect against forgery in a man-in-the-middle attack scenario?
This Question is about DNSCurve. I thought of DNSCurve as "HTTPS for DNS" (like in this Answer) but had some resent thoughts about the trust-relationship between resolvers and nameservers serving the ...
- 11
1
vote
0
answers
2k
views
Vulnerability NTP:Traffic amplification in clrtrap feature of ntpd affect or not affect to Cisco device?
I am using CCSVM tool SCAN for Network devices (Cisco). Below you can find the scan result:
Title vulnerability: NTP: Traffic amplification in clrtrap feature of
ntpd Solution fix: Disable NTP ...
- 11
0
votes
0
answers
141
views
Most likely route to hostile domain take-over?
Say a citizen-run journalist site is a target of a hostile government. The site is hosted over HTTPS in a different country, outside the government's reach. However, the site domain name is within ...
- 121
0
votes
0
answers
134
views
Understanding DNSSEC NSEC3 output for valid domain name
I am trying to understand NSEC3 record when querying for existing domain name, for NXDOMAIN I understand how it works. RFC has example about WildCard, NODATA & NXDOMAIN
So I fired these queries ...
- 105
0
votes
0
answers
180
views
How to properly handle DNSKEY delegation across DNS zones?
I'm trying to implement a toy project DNSSEC supported DNS resolver to learn about both DNS and DNSSEC.
Most of my implementation are finished. But for some domains it's not working correctly, and I ...
- 101
-1
votes
1
answer
2k
views
DNSSEC is not configured for X website
I'm pretty new to this world of security and I'm doing some challenges trying to solve puzles of security, the thing is I have a website that is not loading it throws a timeout if I do ping, but ...
- 99