What are some of the concerns regarding DNSSEC?
• You must actively maintain the extra DNSSEC data, including securing your DNSSEC private data should you wish to sign your own zone or offer a security aware DNS server. • If a key is compromised, you must take immediate action to rollover the key. • If you run a caching resolver that you will use to validate signatures, you must actively maintain the Trust Anchors • You may have to educate your customers on how to make their software DNSSEC-aware. • There have been a few reported cases that require end users to upgrade their network gear, such as routers, switches, and wireless access points in order to resolve signed domain names (DNSSEC adds no problem to people that aren’t trying to validate the results. DSL and similar boxes gets in the way when the name server behind it tried to do validation, mostly when using the box as a forwarding resolver) 7. What is Friends & Family Testing? PIR has a set of test domains that will be tested in a controlled environment. We will manually in
