(DS) Resource Records (RRs) DNSSEC Operational Practices DNS Security (DNSSEC) Experiments Automated Updates of DNS Security (DNSSEC) Trust Anchors DNSSEC Hashed Authenticated Denial of Existence Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC DNS Security (DNSSEC) DNSKEY Algorithm IANA Registry Updates DNSSEC Operational Practices, Version 2 Clarifications and Implementation Notes for DNS Security (DNSSEC) Authenticated Denial of Existence in the DNS Automating DNSSEC Delegation Trust Maintenance DNSSEC Key Rollover Timing Considerations Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC Algorithm Implementation Requirements and Usage Guidance for DNSSEC Moving DNSSEC Lookaside Validation (DLV) to Historic Status Guidance for NSEC3 Parameter Settings Tools DNSSEC deployment requires software on the server and client side. Some of the tools that support DNSSEC include: Windows 7 and Windows Server 2008 R2 include a "security-aware" stub resolver that is able to differentiate between secure and non-secure responses by a recursive name server. Windows Server 2012 DNSSEC is compatible with secure dynamic updates with Active Directory-integrated zones, plus Active Directory replication of anchor keys to other such servers. BIND, the most popular DNS name server (which includes dig), incorporates the newer DNSSEC-bis (DS records) protocol as well as support for NSEC3 records. Unbound is a DNS name server that was written from the ground up to be designed around DNSSEC concepts. mysqlBind The GPL DNS management software for DNS ASPs now supports DNSSEC. OpenDNSSEC is a designated DNSSEC signer tool using PKCS#11 to interface with hardware security modules. Knot DNS has added support for automatic DNSSEC signing in version 1.4.0. PowerDNS fully supports DNSSEC as of version 3.0 in pre-signed and live-signed modes. DNSSEC: What is it and why is it important to implement it for a long time? — Check it Initiative of the Internet community and the Dutch government See also DNSCrypt DNSCurve Extension Mechanisms for DNS (EDNS) TSIG Resource Public Key Infrastructure (RPKI) References Further reading External links DNSSEC - DNSSEC information site: DNSSEC.net DNSEXT DNS Extensions IETF Working Group DNSSEC-Tools Project Internet Standards Domain Name System Domain name system extensions Public-key cryptography Key management sv:DNS#DNSSEC