DNSSEC: Where are we now?

Abstract

DNSSEC has seen a major bump in deployment the last few years, with the signing of the root being a milestone. Nowadays, there exists several implementations of the protocol. Many top-level domains have adopted DNSSEC, but not without encountering deployment hurdles. From their experiences we can learn, they paved the road for the rest to come.

There are still several steps to be taken in order to advance the deployment of DNSSEC globally. The focus is shifting to second-level domains and service providers. Furthermore, DNSSEC is not only there to protect the DNS, but it can serve as a component to facilitate other trust relations on the network.

Biography

Olaf Kolkman is director of NLnet Labs, a foundation chartered to develop open source software and open source standards for the Internet. He has been actively involved with Internet technology since during the early nineties during his astronomy studies and became professionally involved in 1996.

In 1997 he joined the RIPE NCC where he got involved in the test-traffic project. After being operations manager he became systems architect and project manager in 2000. He was responsible for DNSSEC deployment at the RIPE NCC.

During that project Kolkman got more involved in the DNS community and became active in the IETF. He served as chair of the DNS extension's working group.

As director of NLnet Labs he 'evangineers' the Open Internet. In particular the use of open standards and technologies, and the development and deployment of technologies that secure the Internet. NLnet Labs activities are largely focused around providing reliable open source software to achieve better security, particularly in the area of DNSSEC.

Olaf Kolkman is an IAB member since March 2006 and was its chair between March 2007 and March 2011. Olaf Kolkman was born (1966) and raised in the Netherlands. He is married, with two kids, and lives in Uithoorn, The Netherlands. Olaf is married to Leidi, has two kids and lives in Uithoorn, NL.