During a seminar at the University of Trier I gave a DNSSEC talk (in German). If you would like to have the slides, you can download them here or from SlideShare.

Relevant RFCs

Here is a list of relevant RFCs for DNSSEC:

• DNS Security Introduction and Requirements (RFC 4033)
• Resource Records for the DNS Security Extensions (RFC 4034)
• Protocol Modifications for the DNS Security Extensions (RFC 4035)
• Automated Updates of DNS Security (DNSSEC) Trust Anchors (RFC 5011)
• DNS Security (DNSSEC) Hashed Authenticated Denial of Existence (RFC 5155)

Spreading DNSSEC

To not only talk about it, but also to promote the distribution of DNSSEC, I have activated DNSSEC for my domains, including this one. Try the following command to check mlohr.com for valid DNSSEC records:

% dig +dnssec -t ANY mlohr.com