Advanced DNSSEC infrastucture
Domain Name System Security Extensions (DNSSEC) adds origin authentication and integrity protection to the protocol by signing DNS data. However the ratio of signed domain names remains low, mostly because, as any security feature, DNSSEC brings some risks when implemented without a proper understanding.
This course targets IT students, professionals or enthusiasts currently managing domain names and potentially already signing their DNS zones. It will gives them a hands-on experience of reliably operating DNSSEC zone signature in a more reliable and advanced infrastructure.
Content
- Review of the DNS technical infrastructure, with a focus on security threats and that can be mitigated with DNSSEC and principles of DNSSEC
- Installation, configuration and administration of a secure and resilient DNSSEC signing infrastructure
- DNSSEC keys and algorithm roll-overs
Learning Outcomes
By the end of this course, participants will have a deeper understanding of the DNSSEC functioning and caveats and will be able to implement a more advanced DNSSEC-signing infrastructure using open-source software.
Training Method
Lecture and practical hands on training.