トルコの人たちTwitterを見るために壁に8.8.8.8って書いてたはなしすき
DNSSEC: An Introduction
2014-10-07
https://blog.cloudflare.com/dnssec-an-introduction/
The Cloudflare Blog · DNSSEC: An IntroductionAt CloudFlare our mission is to help build a better Internet. Part of this effort includes making web sites faster, more reliable, and more trustworthy.
そういえばこの前のブラジルでは通用しなかったのかしら
Chain of trustまでたどりついたけどRRSIGレコードの内容はまだわからない
How DNSSEC Works
https://www.cloudflare.com/dns/dnssec/how-dnssec-works/
www.cloudflare.comHow DNSSEC WorksDNSSEC helps The domain name system (DNS) which the phone book of the Internet to be secure, Find out how it works here.
https://datatracker.ietf.org/doc/html/rfc4034
- DNSKEY: フラグ プロトコル アルゴリズム 公開鍵
- Zone鍵はフラグの最上位が1
- RRSIG: タイプ アルゴリズム ラベル オリジナルTTL 有効期限 署名時刻 タグ 署名者名 署名
らしい。
IETF DatatrackerRFC 4034: Resource Records for the DNS Security ExtensionsThis document is part of a family of documents that describe the DNS Security Extensions (DNSSEC). The DNS Security Extensions are a collection of resource records and protocol modifications that provide source authentication for the DNS. This document defines the public key (DNSKEY), delegation signer (DS), resource record digital signature (RRSIG), and authenticated denial of existence (NSEC) resource records. The purpose and format of each resource record is described in detail, and an example of each resource record is given. This document obsoletes RFC 2535 and incorporates changes from all updates to RFC 2535. [STANDARDS-TRACK]