Replies to This Discussion

Permalink Reply by Mohd Fitri Abd Rahman on February 8, 2011 at 11:00pm

haha.. DNSSEC is about:

{

allow-transfer { master; slave;

};

listen-on-v6 { ::1; any; 2.0.0.2.ip6.arpa;

};

};

Permalink Reply by Amir Haris Ahmad on February 8, 2011 at 11:36pm

Fitri,

 

DNSSEC is about:

 

options {

dnssec-enable yes;

dnssec-validation yes;

};

 

The crucial and important part in DNSSEC implementation is  Authenticated Data (AD). It indicates that the signatures validated correctly. You are now assured that the response you have received is honestly and truly from the official source.

 

My 2 cents

 

 

Permalink Reply by Mohd Fitri Abd Rahman on February 8, 2011 at 11:41pm

Agree, AD validation.

im testing on local already, seem a bit slow. anyways.. speed is trade for security.

Amir Haris said:

Fitri,

 

DNSSEC is about:

 

options {

  dnssec-enable yes;

  dnssec-validation yes;

};

 

The crucial and important part in DNSSEC implementation is  Authenticated Data (AD). It indicates that the signatures validated correctly. You are now assured that the response you have received is honestly and truly from the official source.

 

My 2 cents

 

 

Permalink Reply by Hanif Bin Nordan on February 10, 2011 at 11:35am

Hi Fitri..

how did you test it on local ?

Mohd Fitri Abd Rahman said:

Agree, AD validation.

im testing on local already, seem a bit slow. anyways.. speed is trade for security.

 

Permalink Reply by Amir Haris Ahmad on February 10, 2011 at 12:35pm

Hanif, 

 

I don't want to comment on Fitri reply about his DNSSEC testing. Because DNSSEC not suppose to slow you current DNS query :) .. 

 

rgds

Amir Haris Ahmad

Permalink Reply by Hanif Bin Nordan on February 10, 2011 at 12:45pm

hermm.. maybe he talk about TSIG ? from master transfer to slave a bit slow ? :-D

Amir Haris said:

Hanif, 

 

I don't want to comment on Fitri reply about his DNSSEC testing. Because DNSSEC not suppose to slow you current DNS query :) .. 

 

rgds

Amir Haris Ahmad