]>
Commit | Line | Data |
---|---|---|
0e2063c3 PL |
1 | DNSSEC |
2 | ====== | |
3 | ||
4 | PowerDNS contains support for DNSSEC, enabling the easy serving of | |
5 | DNSSEC secured data, with minimal administrative overhead. | |
6 | ||
7 | In PowerDNS, DNS and signatures and keys are (usually) treated as | |
8 | separate entities. The domain & record storage is thus almost completely | |
9 | devoid of DNSSEC record types. | |
10 | ||
11 | Instead, keying material is stored separately, allowing operators to | |
12 | focus on the already complicated task of keeping DNS data correct. In | |
13 | practice, DNSSEC related material is often stored within the same | |
14 | database, but within separate tables. | |
15 | ||
16 | If a DNSSEC configuration is found for a domain, the PowerDNS daemon | |
17 | will provide key records, signatures and (hashed) denials of existence | |
18 | automatically. | |
19 | ||
20 | As an example, securing an existing zone can be as simple as: | |
21 | ||
22 | :: | |
23 | ||
24 | $ pdnsutil secure-zone powerdnssec.org | |
25 | ||
26 | Alternatively, PowerDNS can serve pre-signed zones, without knowledge of | |
27 | private keys. | |
28 | ||
29 | .. toctree:: | |
30 | :maxdepth: 2 | |
31 | ||
32 | intro | |
33 | profile | |
34 | modes-of-operation | |
35 | pdnsutil | |
36 | migration | |
37 | operational | |
38 | advice | |
39 | pkcs11 | |
40 | ||
41 | Thanks to, acknowledgements | |
42 | --------------------------- | |
43 | ||
44 | PowerDNS DNSSEC has been made possible by the help & contributions of | |
45 | many people. We would like to thank: | |
46 | ||
47 | - Peter Koch (DENIC) | |
48 | - Olaf Kolkman (NLNetLabs) | |
49 | - Wouter Wijngaards (NLNetLabs) | |
50 | - Marco Davids (SIDN) | |
51 | - Markus Travaille (SIDN) | |
52 | - Antoin Verschuren (SIDN) | |
53 | - Olafur Guðmundsson (IETF) | |
54 | - Dan Kaminsky (Recursion Ventures) | |
55 | - Roy Arends (Nominet) | |
56 | - Miek Gieben | |
57 | - Stephane Bortzmeyer (AFNIC) | |
58 | - Michael Braunoeder (nic.at) | |
59 | - Peter van Dijk | |
60 | - Maik Zumstrull | |
61 | - Jose Arthur Benetasso Villanova | |
62 | - Stefan Schmidt (CCC ;-)) | |
63 | - Roland van Rijswijk (Surfnet) | |
64 | - Paul Bakker (Brainspark/Fox-IT) | |
65 | - Mathew Hennessy | |
66 | - Johannes Kuehrer (Austrian World4You GmbH) | |
67 | - Marc van de Geijn (bHosted.nl) | |
68 | - Stefan Arentz | |
69 | - Martin van Hensbergen (Fox-IT) | |
70 | - Christoph Meerwald | |
71 | - Leen Besselink | |
72 | - Detlef Peeters | |
73 | - Christof Meerwald | |
74 | - Jack Lloyd | |
75 | - Frank Altpeter | |
76 | - Fredrik Danerklint | |
77 | - Vasiliy G Tolstov | |
78 | - Brielle Bruns | |
79 | - Evan Hunt (ISC) | |
80 | - Ralf van der Enden | |
81 | - Jan-Piet Mens | |
82 | - Justin Clift | |
83 | - Kees Monshouwer | |
84 | - Aki Tuomi | |
85 | - Ruben Kerkhof | |
86 | - Christian Hofstaedtler | |
87 | - Ruben d'Arco | |
88 | - Morten Stevens | |
89 | - Pieter Lexis | |
90 | ||
91 | This list is far from complete yet .. |