DNSSEC workshop

Time Schedule

Session 1 08:30 - 10:30
Break 10:30 - 11:00
Session 2 11:00 - 13:00
Lunch 13:00 - 14:00
Session 3 14:00 - 15:30
Break 15:30 - 16:00
Session 4 16:00 - 18:00


RLRichard Lamb ICANN ( USA
PRPhil Regnauld NSRC ( France

Day 1 Topic InstPresentations Exercises
Session 1 Intro/welcome RL/PR PDF
DNS basics PR PDF
Session 2 DNS basics (cont'd)
Software overview PR PDF
Session 3 Lab intro PR Introduction to the lab environment
Lab: Setup BIND caching TXT
Lab: Hands-on DNS dig TXT
Lab: Create a zone TXT
(Zone delegation)
Lab: NSD config TXT
Lab: Unbound config TXT
Session 4 Logging TSIG Logging: TXT | SKIP (Swatch: TXT)
TSIG (security) TSIG: TXT
Day 2 Topic InstPresentations Exercises
Session 1 Intro to DNSSEC PR PDF
Problems in the DNS
Session 2 DNSSEC (cont'd)
Session 3 Signing hands-on Live signing demo TXT
Session 4 Lab: DNSSEC signing with BIND Unbound DNSSEC validation:TXT
Lab: Manual rollover ZSK: TXT | KSK: TXT
Lab: Inline signing BIND inline signing: TXT
Day 3 Topic InstPresentations Exercises
Session I DNSSEC Design RL PDF
Session II DNSSEC: Sensible Signing Parameters PDF
Session III Lab: OpenDNSSEC TXT
Session IV Lab: Rollover TXT
Closing SURVEY

Additional topics: dig, drill, dnsviz, dnssec-trigger, DANE

Useful Links

CZ NIC DNSSEC Validator Chrome Plug-In (
CZ NIC DNSSEC Validator Firefox Plug-In (
Last modified 6 years ago Last modified on Mar 21, 2013, 1:07:30 AM

Attachments (26)