1 / 5

DNSSEC Deployment in .edu: A Partnership for Higher Education Security

Learn about DNSSEC deployment in .edu domain, a joint effort between EDUCAUSE and VeriSign to enhance cybersecurity in higher education. Understand the benefits, test bed details, and how institutions can participate.

bquon
Download Presentation

DNSSEC Deployment in .edu: A Partnership for Higher Education Security

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. DNSSEC in .edu Matt Larson Vice President, DNS Research

  2. Who’s Who • EDUCAUSE • “EDUCAUSE is a nonprofit association whose mission is to advance higher education by promoting the intelligent use of information technology.” • Registry operator (business perspective) for .edu • Cooperative agreement with U.S. DoC • Sole registrar for .edu names • VeriSign • Operator of critical Internet infrastructure • Registry operator (technical perspective) for .edu • Subcontractor to EDUCAUSE

  3. DNSSEC in .edu • DNSSEC deployment in .edu is a partnership between EDUCAUSE and VeriSign • EDUCAUSE • DNSSEC-enable registrar systems • Accept key material from .edu registrants • Submit key material to VeriSign • Participate in test bed with selected institutional partners • VeriSign • DNSSEC-enable registry system • Accept key material from .edu registrar • Publish signed .edu zone • Participate in test bed

  4. Testbed Details • Small number of institutions invited by EDUCAUSE to participate • End-to-end testing:Institution  EDUCAUSE  VeriSign  Test bed .edu zone file • Test bed zone hosted on publicly accessible name servers • Benefits: • EDUCAUSE and VeriSign can exercise new DNSSEC systems • Institutions gain experience, watch changes flow from UI to signed zone • Test bed will not track production .edu contents • Production data copied to test bed once • Test bed contents will diverge over time

  5. Questions + Answers

More Related