In this video, Chaim Krause discusses DNS-based authentication of named entities and using self-signed x.509 certificates that are bound to a DNSSEC record instead of a certification authority.
- [Instructor] DANE, DNS-based authentication…of named entities.…This is the latest attempt…in cutting down the amount of spoofed emails.…Tack that's being taken here…is to make it easier to produce your own…x.509 certificates by stating in your DNS records…using DNSSEC so that certificate authorities…don't have to be involved.…Certificate authorities have served us well,…but we've also seen several security incidents…where people are able to make certificates…that have been spoofed…by getting access to root certificates.…
So, this makes it easier to work with…self-signed certificates,…and then you get all the benefits…that come with a certificate.…Information can be found in RFC 6698.…There really isn't a good…single source of information on this,…so what I've done is provided you…with the information to the email archives…of the working group, which is still active.…It's probably the best source for information on this topic.…What does it look like?…It allows an email server…to generate its own x.509 certificate,…
Author
Released
3/15/2017- Reviewing the components of email delivery
- Sending mail with Postfix internally and externally
- Configuring TLS, SASL, and an email client
- Installing database tools
- Creating virtual domains, users, and aliases
- Exploring greylisting with Postgrey
- Installing and configuring spam tools
- Reviewing DNS-based protection against spammers
Skill Level Intermediate
Duration
Views
Related Courses
-
Linux: Multitasking at the Command Line
with Scott Simpson39m 1s Intermediate -
Linux: BIND and DNS
with Chaim Krause1h 33m Intermediate -
Linux: Desktops and Remote Access
with Grant McWilliams1h 44m Intermediate
-
Introduction
-
Welcome47s
-
Required setup50s
-
-
1. Basic Setup
-
Components of email delivery3m 30s
-
Configure TLS6m 54s
-
Configure SASL8m 54s
-
Client software2m 8s
-
-
2. Going Beyond Basic Services
-
Database considerations3m 59s
-
Install database tools4m 39s
-
PostfixAdmin configuration4m 23s
-
Database creation5m 18s
-
Create virtual domains7m 13s
-
Setup virtual email accounts3m 42s
-
-
3. Agent-Based Protection Against Spammers
-
Spam tool installation3m 1s
-
Test spam tools2m 5s
-
4. DNS-Based Protection Against Spammers
-
Conclusion
-
Next steps34s
-
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.
CancelTake notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.
Share this video
Embed this video
Video: DANE