DNSSEC PROJECTS and DNSSEC WORKING GROUPS

• Deployment of DNSSEC in the Root Zone
  Requirements, news and documentation on DNSSEC in the DNS Root Zone
• IETF DNSEXT Working Group (DNS Security Extensions)
  focus on rewriting DNSSEC standards
• IETF DNSOP Working Group (DNS Operations)
  focus on developing guidelines for the operation of DNS servers
• RIPE NCC, DISI Working Group
  Deployment of Internet Security Infrastructures, focus on DNSSEC
• IANA Interim Trust Anchor Repository (ITAR)
  Overview of DNSSEC Trust Anchors provided by DNSSEC enabled TLDs
• NLNet Labs
  DNSSEC Research & Development in the Netherlands
• DNSSEC Deployment Initiative
  Community-based project, focus on implementation and deployment
• IDSA (Infrastructure DNSSEC et Applications)
  DNSSEC Project in France
• National Institute of Standards and Technology (NIST)
  DNSSEC Project
• The DNSSEC Monitoring Project
  Monitors nameservers to see if: 1) DNSSEC is deployed, 2) Server is EDNS0 capable, 3) RRsets are vulnerable to replay attacks
• SK-DNSSEC Project
  research variant; uses symmetric-key cryptography (instead of public keys)

DNSSEC DEPLOYMENT, DNSSEC TESTBEDS and DNSSEC PILOTS

• The Secure Naming Infrastructure Pilot (SNIP)
  A joint project involving NIST, SPARTA Inc, and the Dept. of Homeland Security
• DNSSEC test deployment at IANA
  This data, including the signed zones, are purely for test purposes and are not to be used in any production capacity
• Public Interest Registry (PIR) Testbed
  Testbed for the .org domain
• Nominet UK DNSSEC Testbed
  DNSSEC Testbed for the .uk domain (co.uk, org.uk, net.uk, ltd.uk, plc.uk, me.uk and sch.uk)
• DNSSEC testbed in Russia (.ru)
  Includes signed view, as well as secure delegations
• DNSSEC Deployment in Puerto Rico (.pr)
  Real DNSSEC Deployment for the .pr ccTLD
• DNSSEC testbed in Mexico (.mx)
  DNSSEC testbed for the .mx ccTLD
• CZ.NIC Testbed
  Testbed for the .cz ccTLD
• NLnet Labs SECREG Testbed
  DNSSEC testbed in the Netherlands (.nl) (no longer active)
• NIC-SE / IIS DNSSEC Deployment
  DNSSEC in Sweden (.se)
• Register.BG DNSSEC Deployment
  DNSSEC in Bulgaria (.bg)
• Registro.BR DNSSEC Deployment
  DNSSEC in Brasil (.br)
• DLV Registry (DNSSEC Look-aside Validation) at ISC
  DLV is a technology initiative meant to enable DNSSEC deployment
• Comcast DNSSEC Trial
  DNSSEC-capable resolver at Comcast to test against.
• Root Server Testbed Network
  Coordinated, persistent facility to evaluate major changes to the DNS
• Verisign Opt-In DNSSEC Pilot
  DNSSEC Opt-In testbed (deprecated)
• University of Murcia DNSSEC testbed (SEINIT)
  Partners: Alcatel, BT, Deutsche Telekom, et al
• MYNIC DNSSEC Deployment (.my ccTLD)
  DNSSEC Deployment in Malaysia

DNSSEC RELATED PROJECTS

• VERICERT
  Combining LDAP and DNSSEC to distribute keys securely
• Openswan
  IPsec for Linux, with support for DNSSEC
• LADON
  Distributed authentication for SSH using DNSSEC (project inactive?)