Deploy360 Domain Name System Security Extensions (DNSSEC)

Wednesday, June 30, Is “DNSSEC Day” In Germany!

DNSSEC badgeWant to learn about DNSSEC and DANE auf Deutsch? On Wednesday, June 30, 2015, a group of organizations in Germany will be streaming live a session called “DNSSEC Day” from 14:00 to 18:00 CEST (UTC+2). Information can be found at:

They say the exact link for the live stream will be published there before the start.  The agenda indicates the four-hour live stream will be broken into four parts:

• DNSSEC: Wofür man die Technik braucht, wie sie in Grundzügen funktioniert  (an overview)

• Die Anwendersicht: Wie setzen Clients DNSSEC ein, welche Provider und DNS-Server sind ratsam  (a user’s perspective)

• Handreichungen für Administratoren: Eigene Domäne absichern, Registrare finden, Fallstricke vermeiden  (information for administrators)

• DNSSEC-Spezialitäten: Wie DNSSEC im Zusammenspiel mit weiteren Techniken Man-in-the-Middle-Attacken drastisch erschwert und die Mail-Verschlüsselung vereinfacht: OPENPGPKEY, SMIME/A, SSH Fingerprinting, IPSec  (DNSSEC specialties – which would appear to be mostly related to the DANE protocol)

This “DNSSEC Day” is a cooperative effort between three organizations:

  • The German government’s information security agency (Bundesamt für Sicherheit in der Informationstechnik (BSI))
  • DENIC, the registry behind the .DE top-level domain
  • Heise online, a leading technology media site

This kind of initiative is great to see and not surprising in Germany due to the high level of interest in DNSSEC and DANE, particularly for use in email communication.  DANE is being used quite heavily by a number of email providers, and I’ve been pleased to see a number of German email providers actively advertising their support of DNSSEC and DANE on their websites.

More information can be found at:

We look forward to hearing about how well the event goes and to seeing growth in DNSSEC validation and signing within Germany.

Congrats to all the folks involved for making this happen!

P.S. If you would like to get started with DNSSEC and DANE, please visit our Start Here page to begin!