VSnake notes: DNSSEC

2011-07-14


Домены debian.org и debian.net теперь обеспечены защитой DNSSEC. При правильном применении, эта технология сильно снижает угрозы от спуфинга и фишинга.

“To our knowledge, Debian is the first large Linux distribution who has
secured its zones using DNSSEC with a valid trust chain from the IANA
root zone” says Peter.

Usage of Domain Name Security Extenstions
—————————————–

Probably the easiest way to use DNSSEC is the usage of the unbound [1]
package as resolver. Please see wiki page [2] for details on how to
use unbound and DNSSEC.

1: http://packages.debian.org/unbound
2: http://wiki.debian.org/DNSSEC

debian-news.net/2011/05/14
dnssec.ru
en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions
ru.wikipedia.org/wiki/DNSSEC

Полезное дело (уходит писать записку сисадмину).

Tools