Agenda

DNSSEC workshop

Time Schedule

Session 1	09:00 - 10:30
Break	10:30 - 11:00
Session 2	11:00 - 12:30
Lunch	12:30 - 13:30
Session 3	13:30 - 15:00
Break	15:00 - 15:30
Session 4	15:30 - 17:00

Instructors

JC	John Crain	(​ICANN)	United States
SC	Steve Crocker	(​ICANN)	United States
AL	Andy Linton	Network Startup Resource Center (​NSRC)	New Zealand
OK	Olaf Kolkman	NLnet Labs (​NLnetLabs)	Netherlands
KW	Krit Witwiyaruj	Thai Name Server (​THAINS)	Thailand

Friday morning	Topic	Speaker	Presentations	Exercises
Session 1
Opening Session	Welcoming remarks
	Opening remarks
	Introduction	SC
	Group photos
Session 2	DNSSEC: Why ?	OK	PDF

Friday afternoon	Topic	Speaker	Presentations	Exercises
Session 1	Intro/class presentation	AL	PDF
	DNS refresher (basics)		PDF
Session 2	DNS refresher (cont'd)
	Software overview		PDF
	Lab intro		Introduction to the lab environment
	Lab: Setup BIND caching			TXT
	Lab: Hands-on DNS with dig			TXT
Saturday	Topic	Speaker	Presentations	Exercises
Session 1	Intro to DNSSEC	OK	PDF, Extra material PDF
Session 2	DNSSEC (cont'd)	KW	Notes in Thai: PDF PDF
Session 3	Lab: Create a zone			TXT, TXT
	(Zone delegation)
	Logging			Logging: TXT
	TSIG (security)		PDF	TSIG: TXT
Session 4	Signing hands-on		Live signing demo	TXT
	Enabling DNSSEC validation			TXT
Sunday	Topic	Speaker	Presentations	Exercises
Session 1	Lab: Manual rollover			ZSK: TXT | KSK: TXT
	Lab: BIND Inline signing		TXT
Session 2	DNSSEC Design		PDF
	DNSSEC: Sensible Signing Parameters		PDF
Session 3	Lab: OpenDNSSEC signing			LAB1
	OpenDNSSEC - key states		KSK ZSK
Session 4	Lab 2: OpenDNSSEC rollover			LAB2
	Closing		​SURVEY

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Useful Links

CZ NIC DNSSEC Validator Chrome Plug-In	(​http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/)
CZ NIC DNSSEC Validator Firefox Plug-In	(​http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/)
DNSVIZ - A DNS visualization tool	(​http://dnsviz.net/)
Verisign - DNS debugger	(​http://dnssec-debugger.verisignlabs.com/)
DNSSEC Trigger	(​http://www.nlnetlabs.nl/projects/dnssec-trigger/)
DANE	(​http://www.internetsociety.org/articles/dane-taking-tls-authentication-next-level-using-dnssec)
OpenDNSSEC keystates	​https://wiki.opendnssec.org/display/DOCS/Key+States
NLnet Labs tutorials (includes Troubleshooting slides)	​http://www.dns-school.org/Slides/index.html