Opt-in process and nameserver system for ietf dnssec

Details Opt-in process and nameserver system for ietf dnssec Opt-in process and nameserver system for ietf dnssec

H - Electricity

04

L

H04L 9/32 (2006.01) H04L 9/30 (2006.01)

Patent

CA 2586223

The process of signing and then publishing a DNS zone according to the IETF DNSSEC protocols is improved by the present invention, in order to facilitate the DNSSEC deployment until most of the DNS zones are signed. The prior art situation is that a second-level domain, e.g. example.com, often faces an unwanted status of "DNSSEC island of security," and a challenging task of "trust anchor key" out- of-band distribution. The invention somehow fixes such broken DNSSEC chains of trust, e.g. it fills the gap between a DNSSEC island of security and its signed grandparent or ancestor. The invention is deemed useful for the introduction of DNS root nameservice substitution for DNSSEC support purposes, and allows opt-in while NSEC3 opt- out is awaiting deployment in large TLDs.

Affiliated with

Also associated with

Rating

Opt-in process and nameserver system for ietf dnssec does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Opt-in process and nameserver system for ietf dnssec, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Opt-in process and nameserver system for ietf dnssec will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFCA-PAI-O-1760165