In this video, Chaim Krause covers the basics of DNS Security Extensions. Learn how DNSSEC can be used to provide a greater level of security for you domains resource records, and the tradeoffs that come with implementation.
- [Lecturer] So, I've already discussed TSIG and RNDC,…but what if they're not enough?…TSIG uses a single shared secret.…Now, we've seen that if we use this on all of our servers,…then our network becomes vulnerable…because if one is hacked, all of 'em are hacked.…To avoid that we may use separate keys for higher security,…but with too many it becomes unwieldy for admins.…And then there's also some things it just doesn't do,…like it doesn't allow for stating…that if I don't definitively state a host exists,…then it doesn't.…
Some of these issues are meant to be solved through DNSSEC.…There's a lot involved in doing this,…there's lots of records you need to create,…lots of keys you need to create,…so this is probably only for large networks,…large organizations that need the extra level of security.…If you're a smaller network but you require high security…for some reason, you may be interested in this.…What makes it more secure…is it uses public key cryptography.…
When working with DNSSEC you'll see new records like DNSKEY,…
- Working with different types of name servers
- Working with zone files
- Setting up a basic name server
- Creating, verifying, loading, and testing the zone file
- Allowing queries from localnets
- Configuring an advanced name server
- Serving a website or email
- Adding security
Skill Level Intermediate
Linux: Multitasking at the Command Linewith Scott Simpson39m 1s Intermediate
1. Installing BIND
Installing BIND1m 4s
2. Types of Name Servers
3. Zone Configuration File
4. Basic Name Server Setup
5. Advanced Name Server Setup
6. Security Concerns
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.