How DNSSEC Works

With DNSSEC, a DNS response now contains not only an answer but also a digital signature over that data made by the private key of the zone where the data originates. Validating this signature requires the zone’s public key – which DNSSEC conveniently stores in the DNS – so obtaining the required key for validation is …

SIDN .nl domain registry scathing report on Dutch banks missing DNSSEC

SIDN, the Dutch domain registry, has released a report which  reports that the banking sector don’t have adequate DNSSEC security. The DNSSEC Inventory 2017 (currently only in Dutch) describes the DNSSEC security status of the Netherlands’ most important domain names, of which the biggest offenders are the Dutch banking industry. SIDN analysed more than seven …