DNSSEC: enlaces interesantes (20220611)

Puesta al día de algunos enlaces interesantes sobre DNSSEC para quitármelos de mis marcadores del navegador web:

• DNSSEC Deployment.

• DNSSEC and DANE Deployment Statistics.

  En el momento de escribir este artículo, el despliegue de claves KSK está igualado entre los algoritmos RSASHA256 y ECDSAP256SHA256.

• INCIBE: Guía de implantación y buenas prácticas de DNSSEC.

  Lectura imprescindible. 103 páginas de nada.

• RFC 6605: Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC.

• Resolutions for 2020: Afnic goes elliptic.

• DNSSEC: change of algorithm for the .fr zone.

  El dominio .fr ha migrado a ECDSAP256SHA256.

• DNSSEC Algorithm Use in 2022.

  El 30.5% de los dominios protegidos con DNSSEC utilizan ECDSAP256SHA256.

• DNSSEC: The Long and Bumpy Road of Algorithm Deployment.

• DNSSEC algorithms for TLDs (and everyone else).

• DNSSEC Report 2020-10 for Top 100 Banking Institutions.

• The Reality of Algorithm Agility: Studying the DNSSEC Algorithm Life-Cycle.

• RFC 8080: Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC.

• RFC 7344: Automating DNSSEC Delegation Trust Maintenance.

• RFC 8078: Managing DS Records from the Parent via CDS/CDNSKEY.

• Announcing CDS/CDNSKEY Support.

• DNSSEC provisioning automation with CDS/CDNSKEY in the real world.

• DNSSEC algorithm rollover HOWTO.

• Parents, children, CDS/CDNSKEY records, and dnssec-cds.

• dnssec-cds.

• Automating the DNSSEC trust anchors using CDS.