{"id":4765,"date":"2009-05-25T13:59:01","date_gmt":"2009-05-25T20:59:01","guid":{"rendered":"https:\/\/blogs.infoblox.com\/?p=4765"},"modified":"2020-05-06T10:31:48","modified_gmt":"2020-05-06T17:31:48","slug":"on-spurring-dnssec-adoption","status":"publish","type":"post","link":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/","title":{"rendered":"On Spurring DNSSEC Adoption"},"content":{"rendered":"<p>I recently did\u00a0<a href=\"http:\/\/www.infoblox.com\/news\/events.cfm\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">five talks in Europe on threats to DNS, leading up to the need to deploy DNSSEC<\/a>. Several audiences asked me for my opinion on the right time to implement DNSSEC. Clearly, the lack of signed parent zones is an impediment for most of us: Unless your zones are children of .se, .cz, .br, .bg, or\u00a0<a href=\"https:\/\/itar.iana.org\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">one of the few other signed TLDs<\/a>, you&#8217;d need to distribute your zone&#8217;s public key to everyone you&#8217;d like to validate your zone data. That doesn&#8217;t scale, right?<\/p>\n<p>Actually, that depends. I went for a run in Copenhagen one morning and got hopelessly lost. While wending my way through the quaint streets, I saw the logos of lots of prominent Danish companies. And I realized that if you&#8217;re a big player in a European country, say\u00a0<a href=\"http:\/\/www.danskebank.dk\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">a Danish bank<\/a>, you could probably sign your Internet-facing zones and walk your public key over to the three largest ISPs in Denmark in an afternoon. (Or you could give it to me and I&#8217;ll drop it off while trying to find my way back to the\u00a0<a href=\"http:\/\/www.firsthotels.com\/sktpetri\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Hotel Sankt Petri<\/a>.) This is just a guess, but in Denmark, that might cover half of consumer Internet users or even more &#8211; well worth doing! And the first mover could crow about their more secure Internet presence and turn it into a competitive advantage, thereby cowing competitors into signing their external zones, too.<\/p>\n<p>Certainly this technique won&#8217;t work everywhere, but it might even work here in the U.S. for a company with a high enough profile, like eBay of Bank of America. It&#8217;d be harder to get 50% of consumer Internet users, but if you could line up a few key ISPs, like AT&amp;T, Verizon and Comcast (who are already running\u00a0<a href=\"http:\/\/www.dnssec.comcast.net\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">a DNSSEC validation trial<\/a>), that&#8217;d be a good start.<\/p>\n<p>What do you think? Are there other ways to jumpstart DNSSEC deployment?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I recently did\u00a0five talks in Europe on threats to DNS, leading up to the need to deploy DNSSEC. Several audiences asked me for my opinion on the right time to implement DNSSEC. Clearly, the lack of signed parent zones is an impediment for most of us: Unless your zones are children of .se, .cz, .br, [&hellip;]<\/p>\n","protected":false},"author":178,"featured_media":2267,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[2],"tags":[30,229,16,15],"class_list":{"0":"post-4765","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-security","8":"tag-dns","9":"tag-dnssec","10":"tag-infoblox","11":"tag-security","12":"entry"},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>On Spurring DNSSEC Adoption<\/title>\n<meta name=\"description\" content=\"I recently did five talks in Europe on threats to DNS, leading up to the need to deploy DNSSEC.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"On Spurring DNSSEC Adoption\" \/>\n<meta property=\"og:description\" content=\"I recently did five talks in Europe on threats to DNS, leading up to the need to deploy DNSSEC.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/\" \/>\n<meta property=\"og:site_name\" content=\"Infoblox Blog\" \/>\n<meta property=\"article:published_time\" content=\"2009-05-25T20:59:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-05-06T17:31:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/cisco-infoblox-talk.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"660\" \/>\n\t<meta property=\"og:image:height\" content=\"454\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Cricket Liu\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cricket Liu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/\"},\"author\":{\"name\":\"Cricket Liu\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/bb6b62b1b99a7cbcd7c528d5763778d5\"},\"headline\":\"On Spurring DNSSEC Adoption\",\"datePublished\":\"2009-05-25T20:59:01+00:00\",\"dateModified\":\"2020-05-06T17:31:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/\"},\"wordCount\":329,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/cisco-infoblox-talk.jpg\",\"keywords\":[\"DNS\",\"DNSSEC\",\"Infoblox\",\"Security\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/\",\"name\":\"On Spurring DNSSEC Adoption\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/cisco-infoblox-talk.jpg\",\"datePublished\":\"2009-05-25T20:59:01+00:00\",\"dateModified\":\"2020-05-06T17:31:48+00:00\",\"description\":\"I recently did five talks in Europe on threats to DNS, leading up to the need to deploy DNSSEC.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/cisco-infoblox-talk.jpg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/cisco-infoblox-talk.jpg\",\"width\":660,\"height\":454,\"caption\":\"Infoblox ActiveTrust suite selected as a finalist in CRN\u2019s Tech Innovators Award\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/on-spurring-dnssec-adoption\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/category\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"On Spurring DNSSEC Adoption\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"name\":\"infoblox.com\\\/blog\\\/\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\",\"name\":\"Infoblox\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"width\":137,\"height\":30,\"caption\":\"Infoblox\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/bb6b62b1b99a7cbcd7c528d5763778d5\",\"name\":\"Cricket Liu\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/cricket-new-96x96.jpg\",\"url\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/cricket-new-96x96.jpg\",\"contentUrl\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/cricket-new-96x96.jpg\",\"caption\":\"Cricket Liu\"},\"description\":\"Cricket is one of the world\u2019s leading experts on the Domain Name System (DNS) and serves as the liaison between Infoblox and the DNS community. Before joining Infoblox, he founded an internet consulting and training company, Acme Byte &amp; Wire, after running the hp.com domain at Hewlett-Packard. Cricket is a prolific speaker and author, having written a number of books including \u201cDNS and BIND,\u201d one of the most widely used references in the field, now in its fifth edition.\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/author\\\/cricket-liu\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"On Spurring DNSSEC Adoption","description":"I recently did five talks in Europe on threats to DNS, leading up to the need to deploy DNSSEC.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/","og_locale":"en_US","og_type":"article","og_title":"On Spurring DNSSEC Adoption","og_description":"I recently did five talks in Europe on threats to DNS, leading up to the need to deploy DNSSEC.","og_url":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/","og_site_name":"Infoblox Blog","article_published_time":"2009-05-25T20:59:01+00:00","article_modified_time":"2020-05-06T17:31:48+00:00","og_image":[{"width":660,"height":454,"url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/cisco-infoblox-talk.jpg","type":"image\/jpeg"}],"author":"Cricket Liu","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cricket Liu","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/#article","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/"},"author":{"name":"Cricket Liu","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/bb6b62b1b99a7cbcd7c528d5763778d5"},"headline":"On Spurring DNSSEC Adoption","datePublished":"2009-05-25T20:59:01+00:00","dateModified":"2020-05-06T17:31:48+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/"},"wordCount":329,"publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/cisco-infoblox-talk.jpg","keywords":["DNS","DNSSEC","Infoblox","Security"],"articleSection":["Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/","url":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/","name":"On Spurring DNSSEC Adoption","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/#primaryimage"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/cisco-infoblox-talk.jpg","datePublished":"2009-05-25T20:59:01+00:00","dateModified":"2020-05-06T17:31:48+00:00","description":"I recently did five talks in Europe on threats to DNS, leading up to the need to deploy DNSSEC.","breadcrumb":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/#primaryimage","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/cisco-infoblox-talk.jpg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/cisco-infoblox-talk.jpg","width":660,"height":454,"caption":"Infoblox ActiveTrust suite selected as a finalist in CRN\u2019s Tech Innovators Award"},{"@type":"BreadcrumbList","@id":"https:\/\/www.infoblox.com\/blog\/security\/on-spurring-dnssec-adoption\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.infoblox.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.infoblox.com\/blog\/category\/security\/"},{"@type":"ListItem","position":3,"name":"On Spurring DNSSEC Adoption"}]},{"@type":"WebSite","@id":"https:\/\/www.infoblox.com\/blog\/#website","url":"https:\/\/www.infoblox.com\/blog\/","name":"infoblox.com\/blog\/","description":"","publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infoblox.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.infoblox.com\/blog\/#organization","name":"Infoblox","url":"https:\/\/www.infoblox.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","width":137,"height":30,"caption":"Infoblox"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/bb6b62b1b99a7cbcd7c528d5763778d5","name":"Cricket Liu","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/cricket-new-96x96.jpg","url":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/cricket-new-96x96.jpg","contentUrl":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/cricket-new-96x96.jpg","caption":"Cricket Liu"},"description":"Cricket is one of the world\u2019s leading experts on the Domain Name System (DNS) and serves as the liaison between Infoblox and the DNS community. Before joining Infoblox, he founded an internet consulting and training company, Acme Byte &amp; Wire, after running the hp.com domain at Hewlett-Packard. Cricket is a prolific speaker and author, having written a number of books including \u201cDNS and BIND,\u201d one of the most widely used references in the field, now in its fifth edition.","url":"https:\/\/www.infoblox.com\/blog\/author\/cricket-liu\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/4765","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/users\/178"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/comments?post=4765"}],"version-history":[{"count":1,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/4765\/revisions"}],"predecessor-version":[{"id":4766,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/4765\/revisions\/4766"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media\/2267"}],"wp:attachment":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media?parent=4765"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/categories?post=4765"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/tags?post=4765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}