June 2018
Intermediate to advanced
368 pages
11h 1m
English
If you've decided to sign your zones with DNSSEC, the next question may be, "What nameserver do I use?"
You probably don't want to switch name servers daemons in order to implement DNSSEC. Fortunately, most of the major ones support it.
The other good news is that the major nameservers have all come a long way in DNSSEC deployment, making the signing, maintenance, and rollovers close to fully automated. There are also numerous third-party tools to assist in automating these tasks.
If you are starting a deployment from scratch, I recommend against using manual methods of signing and re-signing after changes and rollovers. Use the tools.
In this section, we'll cover deploying DNSSEC on both the BIND and ...
Read now
Unlock full access