NYLUG Presents: Viktor Dukhovni on DNSSEC and DANE
Channel: NYLUG
Date: 2018-11-14

The talk will introduce the audience to DNSSEC and its role in securing server-to-server email transport via opportunistic use of DANE TLSA records to resist active attacks on STARTTLS.

We will cover DNSSEC and DANE theory and practice, focusing on how to avoid operational pitfalls. Adoption metrics from an ongoing DNSSEC/DANE survey will be briefly covered. Questions from the audience welcome.

Coincidentally, ICANN will be replacing the original 2010 root zone key-signing-key (KSK-2010, key id 19036) with the new KSK-2017 (key id 20326) the day after the talk. The audience should be well prepared for the change.