4 PowerDNS contains support for DNSSEC, enabling the easy serving of
5 DNSSEC secured data, with minimal administrative overhead.
7 In PowerDNS, DNS and signatures and keys are (usually) treated as
8 separate entities. The domain & record storage is thus almost completely
9 devoid of DNSSEC record types.
11 Instead, keying material is stored separately, allowing operators to
12 focus on the already complicated task of keeping DNS data correct. In
13 practice, DNSSEC related material is often stored within the same
14 database, but within separate tables.
16 If a DNSSEC configuration is found for a domain, the PowerDNS daemon
17 will provide key records, signatures and (hashed) denials of existence
20 As an example, securing an existing zone can be as simple as:
24 $ pdnsutil secure-zone powerdnssec.org
26 Alternatively, PowerDNS can serve pre-signed zones, without knowledge of
41 Thanks to, acknowledgements
42 ---------------------------
44 PowerDNS DNSSEC has been made possible by the help & contributions of
45 many people. We would like to thank:
48 - Olaf Kolkman (NLNetLabs)
49 - Wouter Wijngaards (NLNetLabs)
51 - Markus Travaille (SIDN)
52 - Antoin Verschuren (SIDN)
53 - Olafur Guðmundsson (IETF)
54 - Dan Kaminsky (Recursion Ventures)
55 - Roy Arends (Nominet)
57 - Stephane Bortzmeyer (AFNIC)
58 - Michael Braunoeder (nic.at)
61 - Jose Arthur Benetasso Villanova
62 - Stefan Schmidt (CCC ;-))
63 - Roland van Rijswijk (Surfnet)
64 - Paul Bakker (Brainspark/Fox-IT)
66 - Johannes Kuehrer (Austrian World4You GmbH)
67 - Marc van de Geijn (bHosted.nl)
69 - Martin van Hensbergen (Fox-IT)
91 This list is far from complete yet ..