DNSSec - Secure DNS

Name: DNSSec - Secure DNS
Rating: 4.3 (631 reviews)

Learn how DNSSec is used to secure and protect DNS

Last updated 1/2020

English

What you'll learn

5 sections • 16 lectures • 56m total length

Introduction to DNSSec2:18
The background about DNSSec is explained. Why is it needed?
Welcome!1:13
A short welcome message!

Which parties runs dnssec?1:55
DNSSec must be supported in the resolver and in the authoritative DNS servers. You do not need to have DNSSec-support in your local computer.
Intro to hashing and digital signatures0:35
DNSSec uses hashes and digital signatures. These terms are explained in the upcoming lectures.
Hash functions9:36
How hash methods works, why they exists and what defines a proper hash method.
Digital signatures3:35
Digital signatures ("signing") is a key component of DNSSec. In this lecture the concept of signing is explained.
Chain of trust1:21
I explain the chain of trust.
Why two levels of keys?3:25
It seems overkill with multiple levels of keys, but they are the key(!) to the protocol.
RR vs RRSet2:34
The terms "resource record" and "resource record set" might need some clarification.

Signing the zone - part 19:55
This is the first part of 3 lectures where I explain the signing process.
Signing the zone - part 25:33
The second part of the signing process walkthru...
Signing the zone - part 33:04
The third and final part of the signing process walkthru.
Looking at the signed zone6:14
Together we will have a look at how the signed zone looks like.
Testing DNSSec with dig2:57
We verify DNSSec functionality with dig and learns how to use dig to test DNSSec.
Test your knowledge

DNS is not secure! And DNS is the most important protocol of internet! Learn how to secure DNS with DNSSec!

In this course You will learn how DNSSec works, how to implement DNSSec and how to operate DNSSec-enabled DNS-servers.

By the end of this course You will have a solid understanding of how to secure your domains and zones.

What you will learn:

How the signing process works
Background about hashing algorithms and digital signatures.
Differences between ZSK (zone signing keys) and KSK (key signing keys)
How to operate a signed zone in bind.
The chain of trust. How Your zone information is secured all the way back to the root zone.

The requirements:

You really need to know how DNS works. I expect You to already know about zone files, dig, SOA-records and zone transfers.

Target audiences: