How to use DNSSEC in BIND?

5 posts / 0 new

Topic locked

#1 Wed, 02/04/2009 - 23:09

tabletguy

How to use DNSSEC in BIND?

The DNSSEC feature just showed up for me after today's update. I don't see anything in the wiki about it and looking at http://www.dnssec.net/ doesn't really tell me the impact on my existing sites if I start putting it in, etc.

Can I just generate any key I'd like there? If so, are there any recommendations for best compatibility, and how I could go about testing the installation afterwards (preferably via an external service)

Thanks.

#2 Thu, 02/05/2009 - 08:41

Joe

Unfortunately, at the current time DNSSEC isn't really very useful in practice. The reason is that the root zone has not yet been signed, so there is no way for DNS clients to follow a path of trust to ensure that your zones are properly signed.

Once this happens (which is really a political issue), and once registrars start accepting DNSSEC public keys, I will publish Virtualmin docs explaining how to use DNSSEC.

--

Check out the forum guidelines!

#3 Sun, 09/26/2010 - 12:13 (Reply to #2)

sonoracomm

Now that the root zone is signed, is there any new information on this issue?

I searched for documentation first, I promise.

G

#4 Wed, 04/24/2019 - 22:15

j2sw

I would like to resurrect this thread

j2sw.com

#5 Mon, 04/29/2019 - 16:44 (Reply to #4)

Glock24

I just started using DNSSEC last week with a new install of Virtualmin. You enable it in Virtualmin and add the corresponding "key tag" and "digest" in the registrar's control panel for the corresponding domain.

Topic locked