[dns-operations] DNSSEC deployment in Sweden

[Rubens Kuhl]

Just to give you the complete scenario, on .br, as it happens on many other ccTLDs, the registrars are not the only way to register domains. The DNSSEC domains in .br are not due to the registry signing the container zone, but due to DNS services optionally provided to users that register domains directly with the registry. Each domain has its own zone keys and their authority DNS servers are different from the ccTLD servers. From a operational stand-point there is no difference to the user or the community that the servers are maintained by the same organization that runs the registry. 

I understand that registrars usually don't like when they are not the only way to register domains, but that's likely to be out of scope for a dns-operations list. 


Rubens



On Jan 2, 2012, at 12:25 PM, Kjetil Jensen wrote:

> Yes, I like to see more actions from registrars and I do not like when
> Registries jump in and do all the work, why bothering having registrars
> in that case then?
> 
> The correct way to do this is to bring this up to your registrars and
> come up with some good initiative together and make a great example so
> more companies can be ready for DNSSEC.
> 
> That goes for other ccTLD's as well, such as deNIC.
> 
> From a security point of view, I guess it does not matter that much. But
> the policy, readyness, knowledge and market point of view are .cz and
> .se far ahead of the rest of the world.
> -- 
> Kindest Regards
> 
> Kjetil Jensen
> --------------------------------
> Binero AB
> E-mail: kjetil.jensen at binero.se
> Switchboard #: +46 771-24 08 00
> Direct #: +46 8-525 090 55 Ext: #1007
> Cell #: +46 76 83 80 300
> 
> Follow Binero on twitter http://twitter.com/binero
> 
> On 2011-12-28 17:25, Rubens Kuhl wrote:
>>>> I hope in the future that we will see similar deployments, I only know
>>>> of few such as with .CZ etc and ACTIVE 24, s.r.o.
>> Among registrars you are probably right. Among registries two other TLDs have strong DNSSEC counts: .DE and .BR (http://registro.br/stat/dnssec.html , ~190,000 DNSSEC-signed domains)
>