The DNSSEC and IPv6 deployment workshop
.SE has provided DNSSEC as a service for 1.5 years and is now ready to speed up the deployment. .SE has also initiated an IPv6 project with the aim of acheiving a faster adoption of IPv6. .SE invites TLD’s, ISP’s, Registrars and other distinguished guests to join a workshop on DNSSEC and IPv6 Deployment in Stockholm on Monday, 20 October 2008. The purpose is to share our experience, to discuss practical technical and marketing issues needed to gain a more rapid deployment of these technologies and how we as a community can co-operate to achieve the goals.
Program
Track 1: DNSSEC development Track 2: DNSSEC and IPv6 market considerations Track 3: IPv6 for ISP's
09.00 Introduction
09.45 - 11.00 Track 1: DNSSEC tools for TLD - status Track 2: DNSSEC from a Registrar perspective Track 3: IPAM, support for IPv6
11.30 - 13.00 Track 1: DNSSEC tools for TLD, part 2 Track 2: DNSSEC from a customer perspective Track 3: Test of IPv6 support in Firewalls
14.15 - 15.45 Track 1: Threat analysis for DNSSEC Track 2: Business opportunities with IPv6 Track 3: IPv6 service “A to Z” for ISP’s and Hosting, part 1
16.15 - 17.45 Track 1: Resolving with DNSSEC / Signing the root saga Track 2: ENISA / The Industry Coalition for DNSSEC Track 3: IPv6 service “A to Z” for ISP’s and Hosting, part 2
The session schedule (pdf) The list of participants (pdf)
Introduction
- Danny Aerts, CEO .SE
- Dr. Steve Crocker, Shinkuro
- Dr. Vint Cerf, Chief evangelist, Google
- About the workshop, Staffan Hagnell, .SE
Audio recording - Introduction, part 1 (MP3, 12 MB) Audio recording - Introduction, part 2 (MP3, 12 MB) Audio recording - Introduction, part 3 (MP3, 12 MB)
DNSSEC tools for TLD - status
- .SE current Tools, Patrik Wallström, .SE
- .CZ in the DNSSECland, Ondřej Surý, CZ.NIC
- DNSSEC Implementation in .BG, Daniel Kalchev, .BG
- Tools and Requirements for a Registrar, Jimmy Bergman, Loopia
- ISC BIND, Joao Damas, ISC
Audio recording - DNSSEC tools1, part 1 (MP3, 12 MB) Audio recording - DNSSEC tools1, part 2 (MP3, 12 MB) Audio recording - DNSSEC tools1, part 3 (MP3, 12 MB) Audio recording - DNSSEC tools1, part 4 (MP3, 12 MB) Audio recording - DNSSEC tools1, part 5 (MP3, 12 MB) Audio recording - DNSSEC tools1, part 6 (MP3, 12 MB)
DNSSEC from a Registrar perspective
IPAM, support for IPv6
DNSSEC tools for TLD
Audio recording - DNSSEC tools2, part 1 (MP3, 12 MB) Audio recording - DNSSEC tools2, part 2 (MP3, 12 MB) Audio recording - DNSSEC tools2, part 3 (MP3, 12 MB) Audio recording - DNSSEC tools2, part 4 (MP3, 12 MB) Audio recording - DNSSEC tools2, part 5 (MP3, 12 MB) Audio recording - DNSSEC tools2, part 6 (MP3, 12 MB) Audio recording - DNSSEC tools2, part 7 (MP3, 6 MB)
DNSSEC from a customer perspective
Audio recording - DNSSEC from a customer perspective (MP3, 29,7 MB)
Test of IPv6 support in Firewalls
Threat analysis for DNSSEC
Audio recording - Threat analysis, part 1 (MP3, 12 MB) Audio recording - Threat analysis, part 2 (MP3, 12 MB) Audio recording - Threat analysis, part 3 (MP3, 12 MB) Audio recording - Threat analysis, part 4 (MP3, 12 MB) Audio recording - Threat analysis, part 5 (MP3, 12 MB) Audio recording - Threat analysis, part 6 (MP3, 12 MB) Audio recording - Threat analysis, part 7 (MP3, 12 MB) Audio recording - Threat analysis, part 8 (MP3, 12 MB)
Business opportunities with IPv6
- IPv6 – an update from the European Commission, Detlef Eckert, Advisor to Director General, European Commission
- IPv6, findings and efforts, Staffan Hagnell,.SE
- IPv6 for smart objects, Adam Dunkels. SICS
- IPv6 from a business perspective - Presentation, Magnus Rehle, Greenwich Consulting
- IPv6 from a business perspective - Report, Greenwich Consulting
Audio recording - Business opportunities with IPv6 (MP3, 31,7 MB)
IPv6 service “A to Z” for ISP’s and Hosting
Resolving with DNSSEC
Audio recording - Resolving, part 1 (MP3, 12 MB) Audio recording - Resolving, part 2 (MP3, 12 MB) Audio recording - Resolving, part 3 (MP3, 12 MB) Audio recording - Resolving, part 4 (MP3, 12 MB) Audio recording - Resolving, part 5 (MP3, 12 MB) Audio recording - Resolving, part 6 (MP3, 12 MB) Audio recording - Resolving, part 7 (MP3, 12 MB) Audio recording - Resolving, part 8 (MP3, 2,2 MB)
ENISA eCommunications resilience
The Industry Coalition for DNSSEC
Audio recording - ENISA and Coalition for DNSSEC (MP3, 24,2 MB)
IPv6 service “A to Z” for ISP’s and Hosting
- IPv6 - real life operations and experience with customers, Jeroen Massar, SixXS.net
Internetdagarna: International track Tuesday October 21
09.00 Keynote presentations
Tracking the Internet into the 21st century
Dr Vint Cerf, one of theprincipal architects behind the Internet as we know it today, presents his visions for a future Internet
Dr. Vint Cerf, Chief evangelist, Google
Swedish IT policies (in Swedish)
Issues currently discussed within the government.
Åsa Torstensson, minister for Communications
 What if IPv6 fails?
In this talk I'd like to explore the question of a failure of IPv6 adoption. Is a future without IPv6 viable? What will it look like? Is it an option for the future internet?
Patrik Fältström, Cisco (replaces Geoff Huston)
11.00 Four Nordic registries look into the future
The Nordic domain registries have different corporate structures, from government (Finland) to outsourcing (Denmark) and private foundation (Sweden). Furthermore they work under different sets of rules. We look at advantages and disadvantages of each model and ask what we can learn from each other.
We will also discuss future development plans and new services for domain name holders.
Chair: Danny Aerts, CEO.SE
Panel

Danny Aerts, CEO.SE

Hilde Thunem, Norid (.no)

Tuula Vainonkulma-Paananen, Ficora (.fi)
Per Koelle, DK Hostmaster (.dk)
12.30 - 13.40 Lunch
Served in Cabaret restaurant
13.40 Administration of DNSSEC
To implement DNSSEC and sign a zone is more complicated than traditional DNS. New administrative tools for DNSSEC is a prerequisite for getting a broad deployment of DNSSEC. These tools must manage keys and sign zones, and also be easy to use. This seminar will discuss the need, available tools, and need for further development.
Chair: Morgan Lindström, Ecy Education
DNSSEC in an international perspective

Dr. Steve Crocker, Chair, ICANN's Security and Stability Advisory Committee
DNSSEC Key Rollovers: Rolling without falling
Fredrik Palm, Handelsbanken, and Johan Ihrén, Autonomica
The Open source tool ZKT
Joakim Åhlund, security consultant Certezza
How to implement DNSSEC without losing your mind
Joe Gersch, Vice president of engineering, Secure64
OpenDNSSEC
Requirement specification for a TLD's DNSSEC administration system and implementation plans Results from the DNSSEC Workshop on the 20th October Patrik Wallström, .SE
Discussion
15.30 Demonstration of IP Address Management tools and IPv6 firewall tests
 Meet up in Exhibition Hall B downstairs for a tour of the tests being demoed at Internetdagarna. Morgan Lindström, Ecy Communications (left), will present the IP Address Management tools and Håkan Lindberg, B3IT (right) the firewall tests. You will also have an opportunity to meet with and talk to leading vendors in both areas.
17.15 Jeff Cole, World Internet Project
Research into global Internet usage
Jeff Cole is one of the world's leading Internet researchers. In 2000 he initiated the World Internet Project, a global research project involving hundreds of researchers and some 60 000 households in 30 countries where Internet usage is tracked and analyzed.
Chair: Inger Gran, Swedish Information Professionals Society
18.00 - 21.00 Social event
Dinner at Cabaret restaurant
DNSSEC Training October 22-24
Please note that due to heavy interest, this workshop is now full. However, please send us your contact details (e-mail:
Den här e-postadressen är skyddad från spam bots, du måste ha Javascript aktiverat för att visa den
) and we will ensure that you are added to our reserve list.
22 October
09.00: Opening and short presentation of .SE, Staffan Hagnell, .SE
09.20: .SE present solution and development plan, Patrik Wallström, project leader DNSSEC, .SE
10.20: Coffee break
10.40: OpenDNSSEC internals, John Dickinson
12.00: Lunch
13.00: OpenDNSSEC internals, John Dickinson
14.45: Coffee break
15.00: ZKT internals, A simple DNSSEC tool, Joakim Åhlund, Certezza
16.30: Finish
23 October
09.00: Monitoring DNS and DNSSEC, Niclas Rosell, .SE
10.00: Coffee break
10.15: Testing DNSSEC with DNSSCHECK, Niclas Rosell, .SE
11.00: DNSSEC from a resolver operator's view, Mats Dufberg, TeliaSonera
12.00: Lunch
13.00: DKIM milter, a practical use of DNSSEC, Rickard Bondesson
14.15: Coffe break
14.45: .SE's DPS, DNSSEC Policy and Practice Statement, Anne-Marie Eklund Löwinder, .SE
15.45: Coffee break
16.00: .SE's DPS (continued), Anne-Marie Eklund Löwinder, .SE
- Description of .SE's DPS and the present solution for Key Management
- Experiences and further plans
- How to formulate a DPS - What must be included in a DPS and what could be discussed?
17.00: Finish
24 October
09.00: Registry and Registrar interfaces for DNSSEC, Ulrich Wisser, .SE
10.30: Coffee break
11.00: Registry and Registrar interfaces (continued), Ulrich Wisser, .SE
12.00: Lunch
13.00: How to get the market and operators on the train. Conclusion, further work and co-operation. Staffan Hagnell, .SE
15.00: Finish
|