DNSSEC is the best approach to secure your DNS infrastructure and protect visitors to your Web site from unknowingly being victimized by bad actors. Current efforts to deploy DNSSEC globally have been slowed by the complexity of implementation.
Afilias solves this problem with its new 1-Click DNSSECTM service, which allows you to secure your zone with just one click.
What is DNSSEC?
DNS Security Extensions (DNSSEC) was first introduced in the mid-1990s as an additional security measure to protect the DNS from cache poisoning exploits (aka: the Kaminsky bug) which can allow a bad actor to get in the middle of an Internet users’ request to access a Web site without their knowledge. Read more about DNSSEC.
Afilias’ 1-Click DNSSECTM solution
Afilias’ 1-Click DNSSECTM makes it simple and cost-effective to implement DNSSEC, as it requires no new customer hardware or software and it eliminates customer worries about issuing, distributing or maintaining DNSSEC keys.
1-Click DNSSECTM is an add-on service to Afilias’ Managed DNS product that already provides users with the most diverse, globally available infrastructure to manage traffic to their Web presence. In addition to Afilias’ 100% uptime guarantee, 1-Click DNSSECTM will provide users with:
- Automatic creation of the public/private keys required for DNSSEC
- Seamless key management and key rollover
- Easy coordination with participating ICANN-accredited registrars sponsoring the domains to be signed
- Distribution of public keys to parent zones, Trust Anchor Repositories and DNSSEC Look-Aside Validation (DLV) registries.
With 1-Click DNSSECTM you can have the security of DNSSEC and the convenience of effortless management, all rolled into one solution.
Why should you deploy DNSSEC?
DNSSEC will soon be a reality. This year, both the .org and .gov registries are expected to be signed with DNSSEC. The US Department of Commerce is investigating ways to sign the Root zone. Major ISPs are also launching test beds to begin their implementation. With Afilias’ new DNSSEC solution, you can quickly and easily also sign your domains to ensure that you provide secure information within the “chain of trust” when major zones like the Root and TLD registries are signed.
Proof of Concept Customers
Afilias is currently accepting ‘proof of concept’ testing customers and expects to officially rollout 1-Click DNSSECTM as a service available to all Afilias Managed DNS customers later this year.
Proof of concept customers should:
• Be considering DNSSEC implementation in 2009
• Have more than 100,000 queries per month to their DNS
• Be currently using a outsourced or in-house DNS solution with a defined Service Level Agreement (SLA)
• Have a .info, .org or .gov domain in their portfolio.
If you are interested in becoming a “proof of concept” customer please contact us today.