DNSSEC Series #5. Record Types, Keys, Signatures and NSEC

This series of 10 lectures will take you through a full-day class on DNSSEC theory, history, implementation and troubleshooting, using BIND. Topics covered in each session: 1 - Why do we need DNSSEC? 2 - DNSSEC Development & Deployment (history) 3 - Basic Cryptography and DNS background for DNSSEC 4 - Resolution and Validation 5 - Record Types, Keys, Signatures and NSEC 6 - Record Types, Keys, Signatures and NSEC, pt2 7 - Signing with BIND 8 - Key Rollover, Algorithm Rollover 9 - Key maintenance, including the new KASP tool in BIND, Negative trust anchors 10 - Troubleshooting DNSSEC issues You are welcome to post your questions about BIND 9 DNS on our helpful community mailing list at https://lists.isc.org/mailman/listinf.... The BIND Administrative Reference Manual is online at https://bind9.readthedocs.io/en/stable/. We also maintain a knowledgebase of handy technical articles at https://kb.isc.org. Internet Systems Consortium maintains and publishes the BIND 9 DNS software under the open source MPL 2.0 license. ISC is a non-profit, operating to help support the Internet infrastructure and facilitate independent connection to and participation in the Internet. We support this work by offering users professional technical support contracts, including advance notification of security vulnerabilities before public disclosure. --- Learn more at https://www.isc.org