NSRC-ICANN PacNOG 28 DNS & DNSSEC Training # PacNOG 28 - DNS Fundamentals and Introduction to DNS Security * **Date:** July 2 & 5, 11:00-13:00 and 14:00-16:00 each day (FJT) * **Location:** Online * **Host:** [PacNOG](https://www.pacnog.org/pacnog28/) ## Contents * [Detailed Agenda](agenda.html) ## Topics covered - DNS overview, refresher - General architecture (hierarchy, decentralization) - Resolution model - Caching - Security of the DNS (or lack of) - Risks associated with insecure DNS - Mitigations of DNS security problems - DNSSEC - What's involved (signing and validation) - Enabling validation (verification of DNS signatures) - Signing zones - what needs to be in place - Deployment considerations - HW/SW recommendations, including security aspects (HSM) - Example scenario
## Workshop ##
  • [NSRC Survey](https://nsrc.org/limesurvey/)
  • Photos: [Group](images/group-photo.jpg) : [Workshop](https://photos.nsrc.org/)
## Diagrams ## * [Class Topology Overview](dns/materials/class-net.png)