5 replaced http://webmasters.stackexchange.com/ with https://webmasters.stackexchange.com/
source | link
  1. How to find web hosting that meets my requirements?How to find web hosting that meets my requirements?
  2. What is needed to add DNSSEC to my site?What is needed to add DNSSEC to my site?
  3. DNS hosting better managed by Domain provider or Hosting provider?DNS hosting better managed by Domain provider or Hosting provider?
  4. Registrar with good security, DNS hosting, and DNSSEC and IPv6 resolvers?Registrar with good security, DNS hosting, and DNSSEC and IPv6 resolvers?
  1. How to find web hosting that meets my requirements?
  2. What is needed to add DNSSEC to my site?
  3. DNS hosting better managed by Domain provider or Hosting provider?
  4. Registrar with good security, DNS hosting, and DNSSEC and IPv6 resolvers?
  1. How to find web hosting that meets my requirements?
  2. What is needed to add DNSSEC to my site?
  3. DNS hosting better managed by Domain provider or Hosting provider?
  4. Registrar with good security, DNS hosting, and DNSSEC and IPv6 resolvers?
    Question Protected by Community
4 more research results
source | link

Is it possible that the pioneer of DNSSEC adoption would be Go Daddy and all of the "expert" DNS services are not ready yet?

Is it possible that the pioneer of DNSSEC adoption would be Go Daddy and all of the "expert" DNS services are not ready yet?

3 more info on research done
source | link

I want to make sure that only the one right SSL certificate could be validated by the browsers and all of the rogue SSL certificates or certificates for unqualified names would be rejected.

Where can I buy a domain? Whare should I buy a certificate? (Or should I use a self-signed certificate with DNSSEC instead of CAs?) Where can I host DNS? Which providers make the whole process most convenient, most affordable, most complete, most professional, most robust, most secure?

I've been hearing about the insecurity of DNSthe insecurity of DNS for years. I've watched all of the talks by Dan Kaminsky and others from DNS exploits to The future of DNS Security Panel. I knew that using DNS without security is a disaster waiting to happen. I followed the development of the DNSSEC standard. I celebrated the key signing ceremony.

Meanwhile I read about Thousands of SSL Certs Issued To Unqualified Names and Rogue SSL Certs Issued For CIA, MI6, Mossad and many other stories like that showing problems with the current implementation of websites secured with SSL that could be solved by DNSSEC (see: A Major Internet Milestone: DNSSEC and SSL and DNSSEC to fix the SSL mess? and SSL certificate validation and DNSSEC). Everything was on the right track to finally have a secure DNS system in place.

And now more than 2 years later I wanted to just do what everyone said I should do: use DNSSEC for a new domain. So I need a domain registrar and a DNS hosting service that supports DNSSEC. Surprisingly it is not that easy to even find out who does support DNSSEC and to what extent. It was actually much easier to find info on DNSSEC two years ago when everyone was going to support DNSSEC Real Soon Now but now years passed and I hardly see any progress done. I just hope that I was just looking in the wrong places and someone here will kindly explain all of the doubts.

  • registrar and DNS servers with full DNSSEC support for .com domains
  • integration of DNSSEC with SSL certificates

QuestionsSummary

Has anyone here actually set up a website with DNSSEC, from the domain registration to the configuration of DNS servers, to actually having a working website that is fully secured with DNSSEC?

Has anyone successfully integrated DNSSEC with SSL certificates to make sure that only the one right certificate could be validated by the browser and all of the rogue SSL certificates or certificates for unqualified names would be rejected?

Can anyone recommend any of the registrars mentioned above?

Can anyone recommend any registrar not mentioned above?

Any good experience? Bad experience?

I've been hearing about the insecurity of DNS for years. I've watched all of the talks by Dan Kaminsky and others from DNS exploits to The future of DNS Security Panel. I knew that using DNS without security is a disaster waiting to happen. I followed the development of the DNSSEC standard. I celebrated the key signing ceremony. Everything was on the right track to finally have a secure DNS system in place.

And now more than 2 years later I wanted to just do what everyone said I should do: use DNSSEC for a new domain. So I need a domain registrar and a DNS hosting service that supports DNSSEC. Surprisingly it is not that easy to even find out who does support DNSSEC. It was actually much easier to find info on DNSSEC two years ago when everyone was going to support DNSSEC Real Soon Now but now years passed and I hardly see any progress done. I just hope that I was just looking in the wrong places and someone here will explain all of the doubts.

  • registrar and DNS servers with full DNSSEC support for .com domains

Questions

Has anyone here actually set up a website with DNSSEC, from the domain registration to the configuration of DNS servers?

Can anyone recommend any of the registrars mentioned above?

Can anyone recommend any registrar not mentioned above?

I want to make sure that only the one right SSL certificate could be validated by the browsers and all of the rogue SSL certificates or certificates for unqualified names would be rejected.

Where can I buy a domain? Whare should I buy a certificate? (Or should I use a self-signed certificate with DNSSEC instead of CAs?) Where can I host DNS? Which providers make the whole process most convenient, most affordable, most complete, most professional, most robust, most secure?

I've been hearing about the insecurity of DNS for years. I've watched all of the talks by Dan Kaminsky and others from DNS exploits to The future of DNS Security Panel. I knew that using DNS without security is a disaster waiting to happen. I followed the development of the DNSSEC standard. I celebrated the key signing ceremony.

Meanwhile I read about Thousands of SSL Certs Issued To Unqualified Names and Rogue SSL Certs Issued For CIA, MI6, Mossad and many other stories like that showing problems with the current implementation of websites secured with SSL that could be solved by DNSSEC (see: A Major Internet Milestone: DNSSEC and SSL and DNSSEC to fix the SSL mess? and SSL certificate validation and DNSSEC). Everything was on the right track to finally have a secure DNS system in place.

And now more than 2 years later I wanted to just do what everyone said I should do: use DNSSEC for a new domain. So I need a domain registrar and a DNS hosting service that supports DNSSEC. Surprisingly it is not that easy to even find out who does support DNSSEC and to what extent. It was actually much easier to find info on DNSSEC two years ago when everyone was going to support DNSSEC Real Soon Now but now years passed and I hardly see any progress done. I just hope that I was just looking in the wrong places and someone here will kindly explain all of the doubts.

  • registrar and DNS servers with full DNSSEC support for .com domains
  • integration of DNSSEC with SSL certificates

Summary

Has anyone here actually set up a website with DNSSEC, from the domain registration to the configuration of DNS servers, to actually having a working website that is fully secured with DNSSEC?

Has anyone successfully integrated DNSSEC with SSL certificates to make sure that only the one right certificate could be validated by the browser and all of the rogue SSL certificates or certificates for unqualified names would be rejected?

Can anyone recommend any of the registrars mentioned above?

Can anyone recommend any registrar not mentioned above?

Any good experience? Bad experience?

    Tweeted twitter.com/#!/StackWebmasters/status/256544948210515968
2 better questions
source | link
1
source | link