projects / thirdparty / pdns.git / blame
| Commit | Line | Data |
|---|---|---|
| 0e2063c3 PL |
1 | DNSSEC |
| 2 | ====== | |
| 3 | ||
| 4 | PowerDNS contains support for DNSSEC, enabling the easy serving of | |
| 5 | DNSSEC secured data, with minimal administrative overhead. | |
| 6 | ||
| 7 | In PowerDNS, DNS and signatures and keys are (usually) treated as | |
| 8 | separate entities. The domain & record storage is thus almost completely | |
| 9 | devoid of DNSSEC record types. | |
| 10 | ||
| 11 | Instead, keying material is stored separately, allowing operators to | |
| 12 | focus on the already complicated task of keeping DNS data correct. In | |
| 13 | practice, DNSSEC related material is often stored within the same | |
| 14 | database, but within separate tables. | |
| 15 | ||
| 16 | If a DNSSEC configuration is found for a domain, the PowerDNS daemon | |
| 17 | will provide key records, signatures and (hashed) denials of existence | |
| 18 | automatically. | |
| 19 | ||
| 20 | As an example, securing an existing zone can be as simple as: | |
| 21 | ||
| 633489be | 22 | .. code-block:: shell |
| 0e2063c3 PL |
23 | |
| 24 | $ pdnsutil secure-zone powerdnssec.org | |
| 25 | ||
| 26 | Alternatively, PowerDNS can serve pre-signed zones, without knowledge of | |
| 27 | private keys. | |
| 28 | ||
| 29 | .. toctree:: | |
| 30 | :maxdepth: 2 | |
| 31 | ||
| 32 | intro | |
| 33 | profile | |
| 34 | modes-of-operation | |
| 35 | pdnsutil | |
| 36 | migration | |
| 37 | operational | |
| 38 | advice | |
| 39 | pkcs11 | |
| 40 | ||
| 41 | Thanks to, acknowledgements | |
| 42 | --------------------------- | |
| 43 | ||
| 44 | PowerDNS DNSSEC has been made possible by the help & contributions of | |
| 45 | many people. We would like to thank: | |
| 46 | ||
| 47 | - Peter Koch (DENIC) | |
| 48 | - Olaf Kolkman (NLNetLabs) | |
| 49 | - Wouter Wijngaards (NLNetLabs) | |
| 50 | - Marco Davids (SIDN) | |
| 51 | - Markus Travaille (SIDN) | |
| 52 | - Antoin Verschuren (SIDN) | |
| 53 | - Olafur Guðmundsson (IETF) | |
| 54 | - Dan Kaminsky (Recursion Ventures) | |
| 55 | - Roy Arends (Nominet) | |
| 56 | - Miek Gieben | |
| 57 | - Stephane Bortzmeyer (AFNIC) | |
| 58 | - Michael Braunoeder (nic.at) | |
| 59 | - Peter van Dijk | |
| 60 | - Maik Zumstrull | |
| 61 | - Jose Arthur Benetasso Villanova | |
| 62 | - Stefan Schmidt (CCC ;-)) | |
| 63 | - Roland van Rijswijk (Surfnet) | |
| 64 | - Paul Bakker (Brainspark/Fox-IT) | |
| 65 | - Mathew Hennessy | |
| 66 | - Johannes Kuehrer (Austrian World4You GmbH) | |
| 67 | - Marc van de Geijn (bHosted.nl) | |
| 68 | - Stefan Arentz | |
| 69 | - Martin van Hensbergen (Fox-IT) | |
| 70 | - Christoph Meerwald | |
| 71 | - Leen Besselink | |
| 72 | - Detlef Peeters | |
| 73 | - Christof Meerwald | |
| 74 | - Jack Lloyd | |
| 75 | - Frank Altpeter | |
| 76 | - Fredrik Danerklint | |
| 77 | - Vasiliy G Tolstov | |
| 78 | - Brielle Bruns | |
| 79 | - Evan Hunt (ISC) | |
| 80 | - Ralf van der Enden | |
| 81 | - Jan-Piet Mens | |
| 82 | - Justin Clift | |
| 83 | - Kees Monshouwer | |
| 84 | - Aki Tuomi | |
| 85 | - Ruben Kerkhof | |
| 92e42ffd | 86 | - Chris Hofstaedtler |
| 0e2063c3 PL |
87 | - Ruben d'Arco |
| 88 | - Morten Stevens | |
| 89 | - Pieter Lexis | |
| 90 | ||
| a632e7c2 | 91 | and everyone else who contributed to making this possible. |