Like IPv6, DNSSEC is one of those great forward-looking protocols that unfortunately hasn’t seen wide adoption yet. Before I implemented it myself, I could see why. Although some people think BIND itself is difficult to set up, DNSSEC adds an extra layer of keys, key management and a slew of additional DNS records. One day I decided to set up DNSSEC on a personal zone to familiarize myself with the concepts and process, and it turns out that the implementation isn’t all that bad once you grasp a few concepts. In this article, I cover some of the general concepts, and in my next article, I’ll describe the steps for using DNSSEC on your own zone.
展开▼
