Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [dnssec]

Domain Name System Security Extension is a specification for securing certain kinds of information provided by Domain Name System

Domain Name System Security Extension is a specification for securing certain kinds of information provided by Domain Name System.

Its purpose is to allow DNS resolvers (clients) to establish origin and authenticity of DNS records. It works by digitally signing these records using public-key cryptography.

Currently it is described in IETF RFC 2535.

202 questions
0
votes
1 answer

DNSSEC can easily be spoofed?

I want to know the purpose of DNSSEC, what problem does it really try to solve? I think DNSSEC can easily be spoofed by inserting a non-DNSSEC DNS server into the network that serves a non-DNSSEC copy of the zone. But maybe that is not the problem…
anneb
  • 206
  • 1
  • 8
0
votes
1 answer

How do I generate an SSHFP record from a remote ssh server (like a router)?

How do I generate an SSHFP DNS records for a server like a router that does not give you direct access to their keys in a format that ssh-keygen -r machine understands? The ssh-keygen -r machine reads private keys on the local machine.
Graham Leggett
  • 208
  • 2
  • 10
0
votes
1 answer

DNS is only partially working after changing the provider

My website is ecoguardfilters.com. I bought a domain from GoDaddy and hosting is with Hostinger. I changed the nameserver to Hostinger, but it is still not fully propagated, after two weeks. What could be the problem?
Shahid
  • 3
  • 2
0
votes
1 answer

Existing RRSIG with KSK, but no DS record

When getting the key for domaindiscount24.net, I got: domaindiscount24.net. 3600 IN DNSKEY 257 3 7…
vinz
  • 89
  • 7
-1
votes
1 answer

How to find documentation about implementing DNSSEC?

I have a question about the implementation of DNSSEC. I have a DNS Server and I want to implement DNSSEC, but I can't find documentation for this. I have a lot of confusion about this topic since there is little documentation and little precision.…
Fabio Orefice Amez
  • 35
  • 5
-1
votes
1 answer

Authenticating DNS Queries

Is there any way to use a TSIG (or other) key in combination with a DNS query to authenticate into a DNS view for use with recursion? Something like: key trusted-key { algorithm HMAC-SHA256; secret "blonggggg"; }; acl trusted { key…
Tripp Kinetics
  • 115
  • 9
-1
votes
2 answers

How do I secure a zone with dlv.isc.org's DLV service?

I'm setting up domain-lookaside validation. I think I got mostly everything correct. I followed the directions here: https://dlv.isc.org/about/using. I registered my domain and uploaded the key signing key, signed my zone with -l dlv.isc.org option,…
jason dancks
  • 117
  • 3
1 2 3
…
13
14