During a seminar at the University of Trier I gave a DNSSEC talk. If you would like to have the slides, you can download them here (german).

Relevant RFCs

Here is a list of relevant RFCs for DNSSEC:

Spreading DNSSEC

To not only talk about it, but also to promote the distribution of DNSSEC, I have activated DNSSEC for my domains, including this one. Try the following command to check mlohr.com for valid DNSSEC records:

% dig +dnssec -t ANY mlohr.com



phpDNSAdmin – Modular DNS Administration Tool

Those who work a lot with DNS know that bind zone files are quite cumbersome to manage for larger zones. Since I work a lot with DNS servers both professionally and privately, I have been looking for ways to solve this problem. A finding in this search was PowerDNS, a database based solution for DNS servers that also supports DNSSEC. At the same time, however, there was no reasonable UI tool to meet my requirements. There are many alternatives to Bind (besides PowerDNS, e. g. MyDNS etc.), but apparently you have to decide together with the DNS servers which GUI features you want to have. Many user interfaces, for example, do not support all resource record types provided by the server. So I came up with the idea to start a new web-based GUI project: phpDNSAdmin.  The goal here is to provide a frontend that provides all possible RR types and functions regardless of the DNS daemon used. New RRTypes, DNS-Dameons, authentication methods etc. can be easily added by a module structure. The tool was written in PHP, as frontend framework ExtJS is used.

You can find phpDNSAdmin at GitHub.