DNSSEC Workshop - ICANN
Transcript of DNSSEC Workshop - ICANN
![Page 1: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/1.jpg)
DNSSEC WorkshopDan York, Internet Society | ICANN 56 | June 2016
![Page 2: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/2.jpg)
| 2
Remote Participation
Slides and audio streams at:• https://meetings.icann.org/en/icann56-
sched
![Page 3: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/3.jpg)
| 3
Program Committee
• Steve Crocker, Shinkuro, Inc.• Mark Elkins, DNS/ZACR• Cath Goulding, Nominet• Jean Robert Hountomey, AfricaCERT• Jacques Latour, CIRA• Xiaodong Lee, CNNIC• Luciano Minuchin, NIC.AR• Russ Mundy, SPARTA, A Parsons Company• Ondřej Surý, CZNIC • Yoshiro Yoneya, JPRS• Dan York, Internet Society• Julie Hedlund and Kathy Schnitt, ICANN
![Page 4: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/4.jpg)
| 4
Luncheon Sponsors
• Afilias• CIRA• Dyn• SIDN
DNSSEC Lunch and Implementer’s Gathering Sponsors
![Page 5: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/5.jpg)
| 5
Support
The DNSSEC Workshop and associated activities at ICANN are an organized activity of the:
• ICANN Security and Stability Advisory Committee (SSAC)
with additional assistance from the:• Internet Society
Deploy360 Programme
![Page 6: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/6.jpg)
| 6
Program
0915-0930–Presentation:DanYork,InternetSociety–DNSSECWorkshopIntroduction,Program,
DeploymentAroundtheWorld–Counts,Counts,Counts0930-1000–Presentation:MeasurementSurveyofServer-SideDNSSECAdoptionDr.MatthäusWander,UniversityofDuisburg-Essen1000-1015–Presentation:AQuickReviewofDNSSECValidationinToday’sInternetGeoffHuston,APNIC1015-1115–PanelDiscussion:DNSSECDeploymentChallengesModerator:RussMundy,ParsonsPanelists:DaniGrant,CloudFlare–LyingMakesNegativeAnswersCheaper
Ari-MattiHusa,FICORA–DNSSECChallengesGeoffHuston,APNIC–DNSSECDeploymentChallenges
MauricioOviedo,NIC.CR
NickShorey,DepartmentforCulture,Media&Sport,UKGovernment
1115-1145–Presentation:KeySigningKeyRolloverandZSKLengthIncreaseMattLarson,ICANNandDuaneWessels,Verisign1145-1200–Discussion:DNSSECEncryptionAlgorithmsOndřejSurý,CZNICandDanYork,InternetSociety1200-1215–Presentation:DNSSECHowCanIHelp?RussMundy,ParsonsandDanYork,InternetSociety1215-1230–TheGreatDNS/DNSSECQuizRoyArends,ICANN1230-1330–SponsoredLunch
![Page 7: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/7.jpg)
DNSSEC Deployment Around the World: Counts, Counts, CountsDan York, Internet Society | ICANN 56 | June 2016
![Page 8: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/8.jpg)
| 88
http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=0&r=0&w=7&r=1
![Page 9: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/9.jpg)
| 99
http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=1&r=0&w=7&r=1
![Page 10: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/10.jpg)
| 1010
http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=1&r=0&w=7&r=1
Note:MinimaluseofGooglePDNS(thismeansDNSSECsupportbylocalISPs)
![Page 11: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/11.jpg)
| 1111
https://rick.eng.br/dnssecstat/
![Page 12: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/12.jpg)
| 1212
https://rick.eng.br/dnssecstat/
Note:OnlyincludestheTLDsforwhichRickLambcangetstatistics.(Example,.GOVisnotlisted.)
![Page 13: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/13.jpg)
| 1313
https://ntldstats.com/dnssec
Notethat.BANKhas100%signed,asdoes.INSURANCE.
![Page 14: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/14.jpg)
| 14
TLD DNSSEC Implementation Status
Experimental – internal experimentsAnnounced – Public commitment to deployPartial – Zone is signed but not in operationDS in RootOperational – Accepting signed delegations
![Page 15: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/15.jpg)
| 15
![Page 16: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/16.jpg)
| 16
![Page 17: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/17.jpg)
| 17
Morocco- .MAMadagascar- .MG
March2016
![Page 18: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/18.jpg)
| 18
Syria- .SYSaudiArabia–
. السعودیةJune2016
![Page 19: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/19.jpg)
| 19
Romania- .ROJune2016
![Page 20: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/20.jpg)
| 20
![Page 21: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/21.jpg)
| 21
![Page 22: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/22.jpg)
| 22
Receiving the DNSSEC Deployment Maps
The DNSSEC Deployment Maps are published via email every Monday morning through the Internet Society Deploy360 Programme. To subscribe, visit:
www.internetsociety.org/deploy360/dnssec/maps/
![Page 23: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/23.jpg)
| 23
DNSSEC Event Calendar
New calendar to track DNSSEC/DANE-related events. Two views – event listing:
https://www.dnssec-deployment.org/events/
Calendar view:
http://www.dnssec-deployment.org/calendar/
Send event submissions to [email protected]
![Page 24: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/24.jpg)
| 24
IETF 96 Hackathon
Sat/Sun, July 16/17– Berlin
• https://www.ietf.org/hackathon/96-hackathon.html
• Opportunity to work on new tools or services for DNSSEC / DANE / DNS Privacy
• Join us!
![Page 25: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/25.jpg)
| 25
DNSSEC History Project
The DNSSEC History Project is an ongoing project to collect and record the history of the work that went into bringing about the deployment of DNSSEC. To view – or to contribute – please see:
https://wiki.tools.isoc.org/DNSSEC_History_Project
![Page 26: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/26.jpg)
| 26
GCIG “One Internet” Report
http://ourinternet.org/June 21, 2016
![Page 27: DNSSEC Workshop - ICANN](https://reader031.fdocuments.us/reader031/viewer/2022012414/616eb8111be18f00d03bbe3f/html5/thumbnails/27.jpg)
Thank you and Questions
Dan York, Internet Society | ICANN 56 | June 2016