PUBLIC KEY VALIDATION FOR DNS SECURITY EXTENSIONS

ABSTRACT

The deployment of DNS Security (DNSSEC) can only succeed if there is an effective mechanism for DNS public key validation. This paper compares three potential approaches to DNS key validation. A tree based approach utilizes the existing structure of the DNS tree to form highly structured key signing rules. This makes following chains of trust simple, but it allows no flexibility for individual zones and makes incremental deployment impossible. A pure web of trust based approach imposes no structure what so ever on the key signing process. This lack of structure provides a high degree of local control, but also makes it difficult to find trusted chains or specify security policies.

The third approach is a new proposal based on the concept of a fault-tolerant mesh of trust. The mesh approach utilizes some structured elements from the tree-based approach while maintaining the local flexibility found in the web of trust. Our analysis shows the hybrid mesh approach has the best chance of succeeding in the Internet.

TABLE OF CONTENT

TITLE PAGE

CERTIFICATION

APPROVAL

DEDICATION

ACKNOWLEDGEMENT

ABSTRACT

TABLE OF CONTENT

CHAPTER ONE

1.0 INTRODUCTION

1.1 STATEMENT OF PROBLEM

1.2 PURPOSE OF STUDY

1.3 AIMS AND OBJECTIVES

1.4 SCOPE/DELIMITATIONS

1.5 LIMITATIONS/CONSTRAINTS

1.6 DEFINITION OF TERMS

CHAPTER TWO

2.0 LITERATURE REVIEW

CHAPTER THREE

3.0 METHODS FOR FACT FINDING AND DETAILED DISCUSSIONS OF THE SYSTEM

3.1 METHODOLOGIES FOR FACT-FINDING

3.2 DISCUSSIONS

CHAPTER FOUR

4.0 FUTURES, IMPLICATIONS AND CHALLENGES OF THE SYSTEM

4.1 FUTURES

4.2 IMPLICATIONS

4.3 CHALLENGES

CHAPTER FIVE

5.0 RECOMMENDATIONS, SUMMARY AND CONCLUSION

5.1 RECOMMENDATION

5.2 SUMMARY

5.3 CONCLUSION

5.4 REFERENCES

Report Access / View File

Overall Rating

0

5 Star

(0)

4 Star

(0)

3 Star

(0)

2 Star

(0)

1 Star

(0)

APA

LB3KrQR5c0006fde3c696.03592209, X. (2018). PUBLIC KEY VALIDATION FOR DNS SECURITY EXTENSIONS. Afribary. Retrieved from https://beta.afribary.com/works/public-key-validation-for-dns-security-extensions-6192

MLA 8th

LB3KrQR5c0006fde3c696.03592209, XuZJAx35c0006fde31d75.71658929 "PUBLIC KEY VALIDATION FOR DNS SECURITY EXTENSIONS" Afribary. Afribary, 29 Jan. 2018, https://beta.afribary.com/works/public-key-validation-for-dns-security-extensions-6192. Accessed 09 Feb. 2026.

MLA7

LB3KrQR5c0006fde3c696.03592209, XuZJAx35c0006fde31d75.71658929 . "PUBLIC KEY VALIDATION FOR DNS SECURITY EXTENSIONS". Afribary, Afribary, 29 Jan. 2018. Web. 09 Feb. 2026. < https://beta.afribary.com/works/public-key-validation-for-dns-security-extensions-6192 >.

Chicago

LB3KrQR5c0006fde3c696.03592209, XuZJAx35c0006fde31d75.71658929 . "PUBLIC KEY VALIDATION FOR DNS SECURITY EXTENSIONS" Afribary (2018). Accessed February 09, 2026. https://beta.afribary.com/works/public-key-validation-for-dns-security-extensions-6192

PUBLIC KEY VALIDATION FOR DNS SECURITY EXTENSIONS

0

Document Details

Related Works