Friday, May 2, 2014

HUQUE.COM has a signed delegation now

(Off topic: I've been at Verisign Labs over a month now - I'll write a separate post describing my experiences at my new job when I have more time. But the short summary is: no regrets so far; lots of interesting technical work I'm getting involved in; it was probably time for me to move on from Penn; and I think I made the right decision).

A few weeks ago, I created a set of test DNS TLSA records in my personal zone ( to help out some folks participating in the getdns-api hackathon. To correctly authenticate records in the zone, folks needed to have resolvers configured to use the ISC DLV registry, since I hadn't gotten around to setting up a secure delegation in the parent zone (.COM). This finally motivated me to get that done.

Why didn't I do this earlier? Long story, but I've used my own domain for a lot of experiments with DNSSEC configurations over the years (going back to 2007), including testing configurations that I eventually deployed in other larger, production domains. The bigger stumbling block is that the DNS registrar I was using, Network Solutions, does not support DNSSEC (specifically it provides no way for customers to transmit DNSKEY or DS record contents to the TLDs it registers domains in).

So last week, I started the process of changing to a DNSSEC capable registrar. There are a growing number of them out there, and ICANN maintains a list of them. The one I chose is

This was my first time switching registrars - Network Solutions has been my registrar since 1998 when I first registered the domain. At that time Network Solutions both operated the .com DNS top level domain (among others) and registered domains within it. In 2000, Verisign (where I now work) acquired Network Solutions to get into the DNS business, and in 2003 spun it off as a registrar-only business, retaining operation of the .com registry. Unfortunately, as far as I can tell, Network Solutions has announced no plans to support DNSSEC.

The whole process took about 5 days. On April 24th I logged into my network solutions account, unlocked my registration and requested an authorization code to transfer my domain registration. On the 25th I called them on the telephone to confirm the transfer intention and to expedite the delivery of the authorization code (it normally takes them 3 days), which I got shortly after. I then created an account at, and initiated the domain transfer request with the supplied code. The charge was US $8.20, which included a 1-year registration period that extended beyond the current expiration date for my registration with Network Solutions. On the 28th, the transfer was successfully completed.

I then logged into the account and used their DNSSEC interface to add a DS record for, which appeared in the .COM zone more or less immediately.      86400 IN DS 40924 8 2 (
                1F2DC023BFFEDB1F5E9B )      86400 IN RRSIG DS 8 2 86400 (
                20140509035959 20140502024959 56657 com.
                2avC9Hd2gJKBNJGWfZlGU/KHa1KvRv8fqlNWWQo= )

Below is a screen capture of their DNSSEC interface. You need to supply the parameters from your zone's DNSSEC key: the keytag, algorithm, digest type, and the digest string.

Here's a graphical view of the current chain of trust for my zone from the DNSviz tool. As you can see, there are two secure entry paths into my zone, one via the just created normal delegation path through .COM, and one via the DLV Registry at I will be removing the DLV entries shortly.


  1. I have been reading for the past two days about your blogs and topics, still on fetching! Wondering about your words on each line was massively effective. Techno-based information has been fetched in each of your topics. Sure it will enhance and fill the queries of the public needs. Feeling so glad about your article. Thanks…!
    magento training course in chennai
    magento training institute in chennai
    magento 2 training in chennai
    magento development training
    magento 2 course
    magento developer training

  2. Looking for best English to Tamil typing online, make use of our site to enjoy Tamil typing and directly share on your social media handle. Tamil typing Software Download | tamil typing keyboard practice

  3. While acquiring joins from outer sites is the most regularly polished off-page SEO procedure, practically any action that a) happens outside of your own site and b) assists with improving your hunt positioning position could be idea of as "off-page SEO." These incorporate things like: Social media advertising. Visitor writing for a blog. Take My Online Class Help

  4. Public Speaker| Entrepreneurship Course| Startup Training Programs - Mario Peshev:With over 10,000 hours of speaking courses delivered, I have imparted knowledge on my entrepreneurship training program and startup training course to companies worldwide.

    Source: Entrepreneurship training program

  5. Delegation is defined in a variety of ways in professional literature. One of the most widely used definitions for the term is. A student searching cheap article writing service so we have best article ideas and writing help for you.

  6. Get a perfect logo design from Brand Axio. It’s never too late to begin your journey, join now for the best web design and web development service along with SEO facilities.

  7. Norton Antivirus got a strong anti-malware engine, a good range of internet security tools, an intuitive online dashboard, and good customer support, all for a far better price than most competitors. You can set up your norton now, Just follow

  8. Not all hope was lost, though. Remember that determination I was talking about? I knew I was destined for something more; something greater than myself. fitness with dina

  9. We have utilized an enormous group of exceptionally qualified scholarly journalists who are answerable for guaranteeing all orders are finished on schedule and according to the expressed guidelines at order an assignment We ensure all our writers have Masters and PhD degrees from institutions of good reputation plus they have hands on experience in their specialized field.

  10. आपके द्वारा किए गया यह प्रयास अच्छा है और आपके अन्य लेखों को पढ़ने का इंतजार करुंगा। तब तक यदि आप जन्म कुंडली के द्वारा अपनी फ्री जन्म कुंडली भी बना सकते हैं।

  11. Thanks for this content. Check out if you are troubled about device security.

  12. This comment has been removed by the author.

  13. I'm glad you wrote something off topic for the first time, had a lot of fun reading the blog and for a while my attention was distracted from my problems and now I feel very light. Cheap Dissertation Writing Service

  14. I think that I prefer girls from my city less than Russian beauties. I used this site and it helped me find a russian mail order brides that was smart and well-read like me. On the first day we met, I had no idea that she would become my wife, whom I would love more than anyone else in the world, thanks to this service. Thanks a lot and good luck finding your favorite.

  15. I believe this will help your website become more organized because you have decided to set a part on this site for the inquiries regarding tax and as well as the helpful discussions. To be honest, this is one of the few sites that are doing this kind of strategy. Also, I think that this will not only benefit your pay for assignment writing clients or the potential ones but you most especially because you will be able to see the questions easier.

  16. Your information is so impressive to complete our task with help of this blog. Thank you for giving us your precious time to post this blog. With the help of publications and data from law dissertation writing services, you can learn more about this type of information.