Agenda

DNSSEC workshop

Time Schedule

Session 1	08:30 - 10:30
Break	10:30 - 11:00
Session 2	11:00 - 13:00
Lunch	13:00 - 14:00
Session 3	14:00 - 15:30
Break	15:30 - 16:00
Session 4	16:00 - 18:00

Instructors

RL	Richard Lamb	ICANN (​http://www.icann.org/)	USA
PR	Phil Regnauld	NSRC (​http://www.nsrc.org/)	France

Day 1	Topic	Inst	Presentations	Exercises
Session 1	Intro/welcome	RL/PR	PDF
	DNS basics	PR	PDF
Session 2	DNS basics (cont'd)
	Software overview	PR	PDF
Session 3	Lab intro	PR	Introduction to the lab environment
	Lab: Setup BIND caching			TXT
	Lab: Hands-on DNS			dig TXT
	Lab: Create a zone			TXT
	(Zone delegation)
	Lab: NSD config			TXT
	Lab: Unbound config			TXT
Session 4	Logging		TSIG	Logging: TXT | SKIP (Swatch: TXT)
	TSIG (security)			TSIG: TXT
Day 2	Topic	Inst	Presentations	Exercises
Session 1	Intro to DNSSEC	PR	PDF
	Problems in the DNS
Session 2	DNSSEC (cont'd)
Session 3	Signing hands-on		Live signing demo	TXT
Session 4	Lab: DNSSEC signing with BIND			Unbound DNSSEC validation:TXT
	Lab: Manual rollover			ZSK: TXT | KSK: TXT
	Lab: Inline signing		BIND inline signing: TXT
Day 3	Topic	Inst	Presentations	Exercises
Session I	DNSSEC Design	RL	PDF
Session II	DNSSEC: Sensible Signing Parameters		PDF
Session III	Lab: OpenDNSSEC			TXT
	OpenDNSSEC		KSK ZSK
Session IV	Lab: Rollover			TXT
	Closing		​SURVEY

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Useful Links

CZ NIC DNSSEC Validator Chrome Plug-In	(​http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/)
CZ NIC DNSSEC Validator Firefox Plug-In	(​http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/)