DNSSEC RFC

• RFC 1035 - Domain names implementation and specification
  (http://tools.ietf.org/html/rfc1035)
• RFC 2535 - allows host and user keys to generate material DNSSEC signatures is to allow dynamic update without online zone keys
  (http://tools.ietf.org/html/rfc2535)
• RFC 3833 - Backwards compatibility and co-existence with "insecure DNS" was listed as an explicit requirement.
  (href="http://tools.ietf.org/html/rfc3833)

DNSSEC information

• DNSSEC: DNS Security Extensions Securing the Domain Name System
  (http://www.dnssec.net/)
• DNSSEC
  (http://en.wikipedia.org/wiki/DNSSEC)
• The Basics of DNSSEC
  (http://www.onlamp.com/pub/a/onlamp/2004/10/14/dnssec.html)
• DNSSEC Deployment Initiative
  (http://www.dnssec-deployment.org/)
• DNSSEC HOWTO
  (http://nlnetlabs.nl/dnssec_howto/)
• The DNSSEC - Tools Project
  (http://www.dnssec-tools.org/)

DNSSEC in other countries

• Sweden - production
  (http://www.centr.org/main/lib/g1/3693-CTR.html)
• Netherlands - deployment
  (http://nlnetlabs.nl/dnssec/)
• USA - pilat
  (http://lists.verisignlabs.com/mailman/listinfo/dnssec)

Articles on DNSSEC

• How Secure are the Root DNS Servers?
  (http://www.sans.org/reading_room/whitepapers/dns/991.php)
• NIC-SE makes Internet safer using DNSSEC
  (http://sartryck.idg.se/Art/Nic-se_CS912005e.html)
• New IAB chair mulls DNS security, unwanted Internet traffic
  (http://www.networkworld.com/news/2007/032807-iab-chair-dns-security.html)