DNSSEC - Security Extensions
The Domain Name System (DNS) without DNSSEC extension does not protect the DNS data against falsification during transit. Thus there is a risk that an attacker alters DNS data on the route to the customers and they see the content of an other web server than he originally wanted. Theses vulnerabilities known by the Kaminsky report represent a major threat to the reliability of the DNS system and must be corrected by appropriate remedial actions. DNSSEC (Domain Name System Security Extensions) is an extension of the DNS allowing DNS to be signed digitally and the being verified on the receiver's side. DNSSEC therefore represents an important and indispensable technology for all customers that depend on DNS data being transmitted unaltered and safely to their end users.
123domain.eu supports the "DNSSEC testbed for Germany" initiative and contributes a part to the introduction of DNSSEC to speed up the introduction process and simplify its use. With the assistance of 123domain.eu a concept for a testing environment has been developed. The concept is available as a PDF file (German language). Interested customers who want to integrate their domain names into the testbed or wish to use the testbed's DNS resolver feel free to contact our support staff.
Background
For DNSSEC to work the recipient of DNS data must already be familiar with one or more digital signatures which he trusts. Similar to SSL certificates these signatures must be made available to the recipient of the DNA data beforehand. If the recipient knows the signature of the German registry (DeNIC) and DeNIC themselves signs the .de zone, he can verify responses of .de nameservers and check them for alterations by third parties during transit.Furthermore if DeNIC publishes within the DNS data for the .de zone the signature for 123domain.de the recipient can even verify the data sent by 123domain.de's nameservers in the same way.
Consulting
123domain.eu is co-initiator of the "DNSSEC testbed for Germany" initiative and gladly offers consulting services and advice on all aspects of DNSSEC to interested customers.
Signing of your domain name portfolio
123domain.eu supports DNSSEC signing and offers its customers the signing of their DNS data. Please contact the support staff for further information.