Friday, May 2, 2014

HUQUE.COM has a signed delegation now

(Off topic: I've been at Verisign Labs over a month now - I'll write a separate post describing my experiences at my new job when I have more time. But the short summary is: no regrets so far; lots of interesting technical work I'm getting involved in; it was probably time for me to move on from Penn; and I think I made the right decision).

A few weeks ago, I created a set of test DNS TLSA records in my personal zone (huque.com) to help out some folks participating in the getdns-api hackathon. To correctly authenticate records in the zone, folks needed to have resolvers configured to use the ISC DLV registry, since I hadn't gotten around to setting up a secure delegation in the parent zone (.COM). This finally motivated me to get that done.

Why didn't I do this earlier? Long story, but I've used my own domain for a lot of experiments with DNSSEC configurations over the years (going back to 2007), including testing configurations that I eventually deployed in other larger, production domains. The bigger stumbling block is that the DNS registrar I was using, Network Solutions, does not support DNSSEC (specifically it provides no way for customers to transmit DNSKEY or DS record contents to the TLDs it registers domains in).

So last week, I started the process of changing to a DNSSEC capable registrar. There are a growing number of them out there, and ICANN maintains a list of them. The one I chose is GKG.net.

This was my first time switching registrars - Network Solutions has been my registrar since 1998 when I first registered the domain. At that time Network Solutions both operated the .com DNS top level domain (among others) and registered domains within it. In 2000, Verisign (where I now work) acquired Network Solutions to get into the DNS business, and in 2003 spun it off as a registrar-only business, retaining operation of the .com registry. Unfortunately, as far as I can tell, Network Solutions has announced no plans to support DNSSEC.

The whole process took about 5 days. On April 24th I logged into my network solutions account, unlocked my registration and requested an authorization code to transfer my domain registration. On the 25th I called them on the telephone to confirm the transfer intention and to expedite the delivery of the authorization code (it normally takes them 3 days), which I got shortly after. I then created an account at gkg.net, and initiated the domain transfer request with the supplied code. The charge was US $8.20, which included a 1-year registration period that extended beyond the current expiration date for my registration with Network Solutions. On the 28th, the transfer was successfully completed.

I then logged into the gkg.net account and used their DNSSEC interface to add a DS record for huque.com, which appeared in the .COM zone more or less immediately.

huque.com.      86400 IN DS 40924 8 2 (
                816524EB1C3B7D1315AE8330652DD17909C95DE0533C
                1F2DC023BFFEDB1F5E9B )
huque.com.      86400 IN RRSIG DS 8 2 86400 (
                20140509035959 20140502024959 56657 com.
                UkLdvaDKUcHmqAe8JQyXrxn+luWRKrkjfNzG4/xd/PXy
                zQr03L1ZXNzJHnVp7PZSau2UVfsfz5BmYGN5jepIScPc
                57zd/CnKXTZgucT9ry7dHvkdmxr+UCGY1Zg4LQ0pDyAY
                2avC9Hd2gJKBNJGWfZlGU/KHa1KvRv8fqlNWWQo= )


Below is a screen capture of their DNSSEC interface. You need to supply the parameters from your zone's DNSSEC key: the keytag, algorithm, digest type, and the digest string.


Here's a graphical view of the current chain of trust for my zone from the DNSviz tool. As you can see, there are two secure entry paths into my zone, one via the just created normal delegation path through .COM, and one via the DLV Registry at dlv.isc.org. I will be removing the DLV entries shortly.




33 comments:

  1. I have been reading for the past two days about your blogs and topics, still on fetching! Wondering about your words on each line was massively effective. Techno-based information has been fetched in each of your topics. Sure it will enhance and fill the queries of the public needs. Feeling so glad about your article. Thanks…!
    magento training course in chennai
    magento training institute in chennai
    magento 2 training in chennai
    magento development training
    magento 2 course
    magento developer training

    ReplyDelete
  2. Looking for best English to Tamil typing online, make use of our site to enjoy Tamil typing and directly share on your social media handle. Tamil typing Software Download | tamil typing keyboard practice

    ReplyDelete
  3. While acquiring joins from outer sites is the most regularly polished off-page SEO procedure, practically any action that a) happens outside of your own site and b) assists with improving your hunt positioning position could be idea of as "off-page SEO." These incorporate things like: Social media advertising. Visitor writing for a blog. Take My Online Class Help

    ReplyDelete
  4. Public Speaker| Entrepreneurship Course| Startup Training Programs - Mario Peshev:With over 10,000 hours of speaking courses delivered, I have imparted knowledge on my entrepreneurship training program and startup training course to companies worldwide.

    Source: Entrepreneurship training program

    ReplyDelete
  5. Delegation is defined in a variety of ways in professional literature. One of the most widely used definitions for the term is. A student searching cheap article writing service so we have best article ideas and writing help for you.

    ReplyDelete
  6. Get a perfect logo design from Brand Axio. It’s never too late to begin your journey, join now for the best web design and web development service along with SEO facilities.
    https://brandaxio.com/

    ReplyDelete
  7. Norton Antivirus got a strong anti-malware engine, a good range of internet security tools, an intuitive online dashboard, and good customer support, all for a far better price than most competitors. You can set up your norton now, Just follow norton.com/setup

    ReplyDelete
  8. Not all hope was lost, though. Remember that determination I was talking about? I knew I was destined for something more; something greater than myself. fitness with dina

    ReplyDelete
  9. We have utilized an enormous group of exceptionally qualified scholarly journalists who are answerable for guaranteeing all orders are finished on schedule and according to the expressed guidelines at order an assignment We ensure all our writers have Masters and PhD degrees from institutions of good reputation plus they have hands on experience in their specialized field.

    ReplyDelete
  10. आपके द्वारा किए गया यह प्रयास अच्छा है और आपके अन्य लेखों को पढ़ने का इंतजार करुंगा। तब तक यदि आप जन्म कुंडली के द्वारा अपनी फ्री जन्म कुंडली भी बना सकते हैं।

    ReplyDelete
  11. Thanks for this content. Check out mcafee.com/activate if you are troubled about device security.

    ReplyDelete
  12. This comment has been removed by the author.

    ReplyDelete
  13. I'm glad you wrote something off topic for the first time, had a lot of fun reading the blog and for a while my attention was distracted from my problems and now I feel very light. Cheap Dissertation Writing Service

    ReplyDelete
  14. I think that I prefer girls from my city less than Russian beauties. I used this site and it helped me find a russian mail order brides that was smart and well-read like me. On the first day we met, I had no idea that she would become my wife, whom I would love more than anyone else in the world, thanks to this service. Thanks a lot and good luck finding your favorite.

    ReplyDelete
  15. I believe this will help your website become more organized because you have decided to set a part on this site for the inquiries regarding tax and as well as the helpful discussions. To be honest, this is one of the few sites that are doing this kind of strategy. Also, I think that this will not only benefit your pay for assignment writing clients or the potential ones but you most especially because you will be able to see the questions easier.

    ReplyDelete
  16. Your information is so impressive to complete our task with help of this blog. Thank you for giving us your precious time to post this blog. With the help of publications and data from law dissertation writing services, you can learn more about this type of information.

    ReplyDelete
  17. Whether for higher education, work, or immigration, the International English Language Testing System (IELTS) is one of the most extensively utilized heightened English language competency exams. There was a reason why it was so popular. This standardized test is accepted by about 10,000 academic and professional groups in 135 countries throughout the world, including governments, corporations, academic institutions, and professional organizations. As a result, IELTS is one of the most often used exams to verify a person's eligibility to work or study in an English-speaking country. SevenMentor is the best institute for beginners to learn English from start, they provide a friendly environment to learn English. So please do contact to learn more about ielts classes in pune
    .

    ReplyDelete
  18. I'm delighted you went off subject for the first time; I had a lot of fun reading the blog and I am waiting for more content like this.

    ReplyDelete
  19. social media services not just any social media presence, customers expect brands to have a comprehensive social media strategy.

    ReplyDelete
  20. Fashion design is a genre of art that focuses on the creation of everyday apparel and accessories. The two primary genres of current fashion design are haute couture and ready-to-wear. The haute couture line is made to order for a restricted set of consumers and is sized to their exact specifications. To qualify as an haute couture house, a designer must be a member of the Syndical Chamber for Haute Couture and display a new collection twice a year, with a minimum of 35 distinct costumes each time. To learn more about the fashion designing course in Pune, click here.

    ReplyDelete
  21. Hey,This is umair From an international firm,If you are looking for a software to help maintain your daily task,you can try at the human resource management information system they are providing their services in very affordable rates and have wide range of software.HR system, backbone of any business, the efficient and effective performing HR system shows the well-performing status of a business organization.

    ReplyDelete
  22. Cooling fabrics are made using gel, polymer, and phase change materials (PCMs) to offer insulating properties in response to the environment. They absorb heat and moisture and release them into the atmosphere to enhance the breathability and ventilation of the garments. They also aid in maintaining a comfortable body temperature while performing physical activity and improving the overall well-being from scorching conditions. As a result, they find application in the production of sports apparel around the world. The outbreak of the contagious coronavirus disease (COVID-19) and the surging need for personal protective equipment (PPE) represents one of the key factors positively influencing the sales of Cooling Fabrics Market across the globe. Besides this, cooling fabrics are utilized in heavy protective clothing or armors that are worn by firefighters,military personnel, and staff working with the hazardous material cleanup. Furthermore, due to the rising number of sports enthusiasts, leading manufacturers are providing cooling garments that maximize oxygen uptake, increase blood flow to the working muscles, and minimize the risk of inflammation during events.





    If you wish to check more look here : Asia Pacific Vaccine Market, Micro Inverter Market, Albumin Market, Middle East and Africa Cybersecurity Market,Smart Display Market, Vegetable Concentrates Market, Learning Management System Market, States Flooring Market, Sports and Energy Drinks Market, Brazil Healthcare, Sterilisation Services Market, Media Monitoring Tools Market

    ReplyDelete
  23. Thanks for your marvelous posting! I quite enjoyed reading it, you can be a great author.I will remember to bookmark your blog and will often come back later in life. I want to encourage you to ultimately continue your great writing, have a nice weekend! 바둑이사이트

    ReplyDelete
  24. If you plan for the best content like me and have a simple reason every day on a website, you have to give quality content and thank me for a simple visit.

    스포츠토토
    토토사이트웹
    카지노사이트
    바카라사이트
    토토
    스포츠토토핫

    ReplyDelete

  25. Our day-to-day activities are rapidly shifting online. When our regular tasks are achievable through digital platforms, then why not our business? Considering the latest figures; approx 175 websites are created daily. Considering this shift of the tech era, a Website Builder comes in handy and transforms your business digitally. Now you have two places to increase your current revenue.


    ReplyDelete
  26. This is a good idea for people who actually have some questions or inquiries about this topic. I am so excited to see the discussions that will be made on this thread regarding taxes. I have to say that this kind of topic should help with essay writing really be discussed thoroughly to people who finds it helpful so that there won't be no confusions anymore.

    ReplyDelete
  27. Students call MyDissertations an "Write My Law Dissertation" due to their fast relieving services. Their online customer care support responds to queries within minutes. That is why no student has to wait for hours to get a reply. Plus, their academic staff is friendly and knows how to destroy stress from students' minds.

    ReplyDelete