DNSSEC, DNS over HTTPS (DoH) & DoT (DNS over TLS): Concepts & Implementation
Speaker: Shri Anoop Kumar Pandey, Joint Director, C-DAC Bangalore
Brief: Zone Creation, DNSSEC, DoH & DoT implementation demonstration using Bind 9.18 in Ubuntu 22.04.
Concepts of DNSSEC, Digital Signature, Zone Signing Key, Key Signing Key, Delegation Signer, DNS Record Authentication, Next Secure Record (NSEC & NSEC3), DNSSEC-Policy, Inline-Signing, Automatic Zone Signing.
#dns #dnssec #zsk #ksk #nsec #doh #dot
All required Commands
nano /etc/bind/named.conf.local
dnssec-policy "dp" {
max-zone-ttl 604800;
keys {
ksk lifetime unlimited algorithm ecdsa256;
zsk lifetime P60D algorithm ecdsa256;
};
nsec3param;
};
zone "anoop.cdac" in
{
type master;
file "anoop";
dnssec-policy dp;
inline-signing yes;
};
named-checkconf [optional]
named-checkzone anoop.in anoop [optional]
systemctl restart named
systemctl status named [optional]
dig www.anoop.cdac @172.16.11.128 +dnssec +multi
dig @ 172.16.11.128 dnskey anoop.cdac | dnssec-dsfromkey -f - anoop.cdac
On this page of the site you can watch the video online DNSSEC, DNS over HTTPS (DoH) & DoT (DNS over TLS): Concepts & Implementation with a duration of hours minute second in good quality, which was uploaded by the user Anoop Kumar Pandey 23 February 2024, share the link with friends and acquaintances, this video has already been watched 154 times on youtube and it was liked by 5 viewers. Enjoy your viewing!
