Agenda

DNSSEC workshop

Time Schedule

Session 1 09:00 - 10:30
Break 10:30 - 11:00
Session 2 11:00 - 12:30
Lunch 12:30 - 13:30
Session 3 13:30 - 15:00
Break 15:00 - 15:30
Session 4 15:30 - 17:00

Instructors

JC John Crain (ICANN) United States
SCSteve Crocker (ICANN) United States
ALAndy Linton Network Startup Resource Center (NSRC) New Zealand
OKOlaf Kolkman NLnet Labs (NLnetLabs) Netherlands
KWKrit Witwiyaruj Thai Name Server (THAINS) Thailand

Friday morning Topic SpeakerPresentations Exercises
Session 1
Opening Session Welcoming remarks
Opening remarks
Introduction SC
Group photos
Session 2 DNSSEC: Why ? OK PDF
Friday afternoon Topic SpeakerPresentations Exercises
Session 1 Intro/class presentation AL PDF
DNS refresher (basics) PDF
Session 2 DNS refresher (cont'd)
Software overview PDF
Lab intro Introduction to the lab environment
Lab: Setup BIND caching TXT
Lab: Hands-on DNS with dig TXT
Saturday Topic SpeakerPresentations Exercises
Session 1 Intro to DNSSEC OK PDF, Extra material PDF
Session 2 DNSSEC (cont'd) KW Notes in Thai: PDF PDF
Session 3 Lab: Create a zone TXT, TXT
(Zone delegation)
Logging Logging: TXT
TSIG (security) PDF TSIG: TXT
Session 4 Signing hands-on Live signing demo TXT
Enabling DNSSEC validation TXT
Sunday Topic SpeakerPresentations Exercises
Session 1 Lab: Manual rollover ZSK: TXT | KSK: TXT
Lab: BIND Inline signing TXT
Session 2 DNSSEC Design PDF
DNSSEC: Sensible Signing Parameters PDF
Session 3 Lab: OpenDNSSEC signing LAB1
OpenDNSSEC - key states KSK ZSK
Session 4 Lab 2: OpenDNSSEC rollover LAB2
Closing SURVEY

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Useful Links

CZ NIC DNSSEC Validator Chrome Plug-In (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/)
CZ NIC DNSSEC Validator Firefox Plug-In (http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/)
DNSVIZ - A DNS visualization tool (http://dnsviz.net/)
Verisign - DNS debugger (http://dnssec-debugger.verisignlabs.com/)
DNSSEC Trigger (http://www.nlnetlabs.nl/projects/dnssec-trigger/)
DANE (http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec)
OpenDNSSEC keystates https://wiki.opendnssec.org/display/DOCS/Key+States
NLnet Labs tutorials (includes Troubleshooting slides) http://www.dns-school.org/Slides/index.html
Last modified 6 years ago Last modified on Jun 9, 2013, 1:56:26 AM

Attachments (39)