DNSSec Mastery
DNSSec Mastery
$9.99
Minimum price
$9.99
Suggested price
DNSSec Mastery

Last updated on 2013-04-16

About the Book

Table of Contents

  • Converted Files
  • DNSSEC Mastery
  • Acknowledgments
  • Brief Contents
  • Full Contents
  • Chapter 1: Introducing DNSSEC
  • What’s the Problem?
  • How DNSSEC protects you
  • Why This Book?
  • Why Not This Book?
  • Sysadmin Background
  • Server Prerequisites
  • What Is In This Book?
  • Chapter 2: Cryptography and DNSSEC
  • Cryptographic Hashes
  • Public Key Cryptography
  • Digital Signatures and DNSSEC
  • DNSSEC Key Types
  • Chapter 3: How DNSSEC Changes DNS
  • DNSSEC Record Types
  • The Chain of Trust
  • Managing Your Private Keys
  • Publishing Public Keys
  • Chapter 4: DNSSEC Resolver
  • Key Management Directory
  • Activate DNSSEC Resolution
  • Testing DNSSEC Validation
  • Clients and DNSSEC
  • Testing DNSSEC at the Client
  • Chapter 5: dig and DNSSEC
  • DNS Errors
  • Digging DNSSEC
  • digging Authoritative Servers
  • digging the DLV
  • Disabling Validation
  • External Checks
  • Chapter 6: Securing Zone Transfers
  • TSIG Configuration
  • Does TSIG Work?
  • dig Versus TSIG
  • Chapter 7: KSKs and ZSKs
  • Single Key Zones
  • Key Algorithms
  • Bit Lengths
  • Key Files
  • Creating Keys
  • DS Record
  • Dig and Keys
  • Chapter 8: Signing Zones
  • Signature Methods
  • Publish DS Records
  • NSEC3 Signatures
  • Chapter 9: Debugging DNSSEC
  • Check Your Network
  • DNSSEC States
  • Is It DNS or DNSSEC?
  • Web Tools
  • Debugging with dig
  • Insecure Zone
  • Bogus Zone
  • Compile Your Zone
  • Chapter 10: Key Rollover
  • Rollover Risks
  • Rollover Methods
  • Key Lifecycle
  • Zone Times
  • Recommended Zone Times
  • Dating Keys
  • Changing Dates on Existing Keys
  • Rolling Over a ZSK
  • Checking Rollovers
  • Testing Rollovers
  • KSK Rollovers
  • Emergency Key Rollovers
  • Key Management
  • Chapter 11: Delegations and Islands of Trust
  • Subdomains
  • Islands of Trust
  • Chapter 12: DNSSEC for Data Distribution
  • SSH Host Key Fingerprints
  • SSL Certificate Verification: TLSA
  • TLSA Records
  • TLSA Browser Plugins
  • Afterword

About the Author

The Leanpub 45-day 100% Happiness Guarantee

Within 45 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.

See full terms...

Write and Publish on Leanpub

Authors and publishers use Leanpub to publish amazing in-progress and completed ebooks, just like this one. You can use Leanpub to write, publish and sell your book as well! Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks. Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. It really is that easy.

Learn more about writing on Leanpub