DNSSEC Workshop
This event took place on 9 March 2016 from 09:00-15:15 +00 at ICANN Public Meetings in the Palmeraie room.
Date:
Wed, 9 March 2016 - 09:00 to 15:15 +00
Add to Calendar
Room:
Palmeraie
Session Leader(s):
Julie Hedlund | Policy Director & SSAC Support
Overview:
DNSSEC deployment is continuing to move forward. This session is a public presentation and discussion with those actively engaged in the deployment of DNSSEC.
Why it's Important
Registries, registrars, ISP's and others who plan to deploy DNSSEC services will benefit from the presentation and discussion of the deployment experience.
Who Should Attend?
Anyone with an interest in the deployment of DNSSEC, particularly registry, registrar and ISP representatives with technical, operational, and strategic planning roles.
Agenda Details:
Key to Level of Difficulty:
NOVICE = New to DNSSEC and want to learn more
INTERMEDIATE = Familiar with DNSSEC and how it works, but not of all concepts
EXPERT = Expert understanding of DNSSEC and extensive experience in deployment/implementation
| 0900-0915 – Presentation: Dan York, Internet Society – DNSSEC Workshop Introduction, Program, Deployment Around the World – Counts, Counts, Counts |
| 0915-0930 – Presentation: Update on the 'Sunset' of the DNSSEC Look-aside Validation Registry (DLV) |
| Victoria Risk, Internet Systems Consortium (ISC) |
| 0930-1030 – Panel Discussion: DNSSEC Activities in the African Region |
| Moderator: Mark Elkins, DNS/ZACR |
| Panelists: |
| Alain Aina, AfriNic |
| Mark Elkins, DNS/ZACR |
| Sara Monteiro, .PT -- DNSSEC Activities in the African Region LusNIC, .AO, .CV and GW |
| Eberhard Lisse, .NA -- So You Want to Do DNSSEC |
| 1030-1045 – Coffee Break |
| 1045-1115 – Presentation: Open DNSSEC SIGNER Switchover Experience |
| Alain Aina, AfriNic |
| 1115-1145 – Presentation: DNSSEC At Scale |
| Dani Grant, CloudFlare |
| 1145-1200 – Great DNS/DNSSEC Quiz |
| Dan York, Internet Society |
| 1200-1315 – Lunch Break in Grand Bleu |
| 1315-1415 – Panel Discussion: DNSSEC and Elliptic Curve Cryptography |
| Moderator: Dan York, Internet Society |
| Panelists: |
| Dan York, Internet Society: Challenges to Deployment of ECDSA |
| Geoff Huston, APNIC -- ECDSA P-256 support in DNSSEC-validating Resolvers |
| Jim Galvin, Afilias |
| Ólafur Guðmundsson, CloudFlare -- Adding New DNSSEC Algorithms: Reality Check |
| Ondřej Surý, CZNIC -- New Curves in DNSSEC |
| 1415-1500 – Panel Discussion: DNSSEC Root Key Signing Key (KSK) Rollover |
| Moderator: Russ Mundy, Parsons – SSAC Advisory and Comments on DNSSEC Key Rollover in the Root Zone |
| Geoff Huston, APNIC/Root KSK Rollover Design Team – Rolling the Root |
| Warren Kumari, Google |
| 1500-1515 – Presentation: DNSSEC - How Can I Help? |
| Russ Mundy, Parsons and Dan York, Internet Society |