During the workshop “Improving Resilience in European e-Communication Networks” organised by ENISA in November 2008, the need to increase security and availability of DNS using a form of Key Infrastructure was highlighted among the priorities for Europe. Concerning such a Key Infrastructure architecture the consensus by the workshop participants was, that:
- An assessment of the possible deployment alternatives should be carried out.
- The deployment as distributed authority should be considered.
- There is a need for the creation of tools available to administrators as well as for users.
Against this background ENISA has organised a one day workshop in Athens on the 28th of January, 2009, with the aim to take stock on the deployment status of DNSSEC (signing of TLDs and root), present and discuss experiences from registries, registrars and registrants that have implemented DNSSEC At the same time, the workshop aims at exploring possible actions that ENISA can take up in regard but not limiting to:
- Tools and Applications - Architectures, signing and key management practices, implementation guides, Risk Analysis of deployment
- Educational Material - Material that explains the value and benefit of DNSSEC, Awareness raising
- Incentives - A push for organizations to take action or incentives to influence their decision
The workshop has offered the opportunity to 10-12 experts in the area to exchange ideas and agree upon a clearly defined set of actions to be carried out by an ENISA working group during 2009 and the associated time schedule. It launched the ENISA activities on improving resilience of DNS.
Progress of activities
Workshop on the deployment status of DNSSEC - Athens, 28th January 2009