Project

General

Profile

Actions
Copy link

Task #5813

closed
NS YK

Research whether DNSSEC with NSEC5 is interesting for us

Task #5813: Research whether DNSSEC with NSEC5 is interesting for us

Added by Nico Schottelius over 7 years ago. Updated almost 7 years ago.

Status:
Closed
Priority:
Low
Assignee:
Yury Komarov
Target version:
-
Start date:
10/11/2018
Due date:
01/18/2019
% Done:

0%

Estimated time:
PM Check date:
01/28/2019

Description

  • dnssec-old led to zone walking
  • dnssec with nsec3 requires online signing -> private key on dns servers
  • dnssec with nsec5 sounds promising, but we need to investigate whether
    • bind9 on our servers properly supports it
    • there are no other attacks against nsec5
    • nsec5 is actually usable within .ch domain

NS Updated by Nico Schottelius over 7 years ago Actions
Copy link
 #1

  • Priority changed from Normal to Low

YK Updated by Yury Komarov over 7 years ago Actions
Copy link
 #2

  • Status changed from New to Seen

JK Updated by Jason Kim about 7 years ago Actions
Copy link
 #3

  • Due date changed from 10/31/2018 to 01/18/2019
  • PM Check date set to 01/10/2019

JK Updated by Jason Kim about 7 years ago Actions
Copy link
 #4

  • PM Check date changed from 01/10/2019 to 01/28/2019

NS Updated by Nico Schottelius almost 7 years ago Actions
Copy link
 #5

  • Status changed from Seen to Closed

Seems to be unusable for further time.

Actions
Copy link

Also available in: PDF Atom