exanames

We were happy to take part in DENIC's 4th DNSSEC Testbed Meeting on Wednesday. It was great to hear something about the current state of DNSSEC at .de and hear others speak about their experiences. In the afternoon, we also had the chance to present our reseller product alongside other very good presentations. You can find the slides here [pdf, 1MB]. Our thanks go to DENIC for the great organization, the nice atmosphere, and tasty sandwiches.

With this year's release of exanames, we have received different responses as to how we should position the product and how our customers should be able to use the DNSSEC-related services. We would like to provide the key signing and publishing services for a zone without the need to host the zone on our DNS servers.

We would like to start a discussion on how this could be done, not only for us, but also other technical services providers. In this post we present a way to let a service provider take control of those publishing services with the owner's permission.

Afilias undertook a survey amongst 3000 registrars to evaluate the readiness amongst them towards DNSSEC.

As of today the DNS root zone has been signed with DNSSEC. Now that the root zone is signed you might want to make use of it. We give some example configurations for BIND and Unbound on how to do this.

Starting this week, we offer the Exanames (the product) to registrars. With Exanames, registrars can sell their customers DNSSEC as part of their products without the effort of implementing DNSSEC on their own.

Specifically, Exanames automates the processes involved in DNSSEC and simplifies its use drastically. Some key features include:

• Regular domain resigning for updated signatures.
• Automated Zone Signing and Key Signing key rollover.
• Public key submission at parent zone.

Product conditions and details can be found here: http://exanames.com/products/reseller

We are still in the first phase of this product, so we are very curious about your feedback. You can always send us a mail as indicated on the reseller page, or use the associated Get Satisfaction page.