Updating the Keys for DNS Security

Rose, Scott; Feldman, Larry; Witte, Gregory

ITL Bulletin

Updating the Keys for DNS Security

Documentation Topics

Date Published: September 2017

Editor(s)

Scott Rose (NIST), Larry Feldman (G2), Gregory Witte (G2)

Abstract

To help maintain the reliability and integrity of the Internet's Domain Name System (DNS), NIST is working with specialists from around the world to update the keys used by the DNS Security Extensions (DNSSEC) protocol to authenticate DNS data and avoid integrity issues such as domain name hijacking.

Keywords

Domain Name System (DNS), DNS Security Extensions (DNSSEC), key signing key (KSK), rollover, internet, security

Control Families

None selected

Documentation

Publication:
September 2017 ITL Bulletin (pdf)

Supplemental Material:
None available

Document History:
09/27/17: ITL Bulletin (Final)

Topics

Security and Privacy

digital signatures, key management

Technologies

networks