The .nl registry (Netherlands) has over 5 million domain names registered and is the largest DNSSEC signed zone in the world with over 1 million signed domains. SIDN, the .nl registry, took a collaborative approach to deploying DNSSEC by initiating and coordinating mass signing among their 1700 registrars. Through support from PowerDNS and the Dutch government, they were able to sign 239 registrars to date and continue working on further steps like DNSSEC secure transfers and health monitoring.

1. .nl
DNSSEC
Deployment
Deploying
DNSSEC
ION
Ljubljana
Oct
19,
2012
Daniël
Federer
1

2. SIDN
o .nl
registry
(Netherlands)
o Not-­‐for-­‐profit
private
organizaLon
o 5.000.000+
domain
names
o Around
1700
registrars
o Largest
DNSSEC
zone
in
the
world
(1.000.000+
signed)
2

3. Collabora,ve
Approach
to
Deploy
DNSSEC
dnssec.nl
Tools
and
docs
in
Dutch
Facebook/Twiaer
Strategy:
iniLate,
coordinate,
promote
mass
signing
Flawless
intro
of
T2,
DNSSEC
knowledge,
account
management,
2
year
discount
Huge
effort
Huge
effort
9
High-­‐ CompensaLon
business
case
OrganizaLon-­‐wide
impact
SIDN
profile
New
USP
Lots
of
publicity
Rewarding:
safer
internet!
Registrars
Further
extended
trustworthiness
Feedback
(account
mgt,
surveys)
InternaLonal
advantage
PowerDNS
Financial
support
Tech
support,
Current
#
DNSSEC
registrars:
DNSSEC
tools
239
Dutch
Gov.
Promote
DNSSEC,
Agencies
Gov.
DNSSEC
policy
DNSSEC
knowledge,
(customer
demand),
Webinar
DNSSEC
awareness
3

4. .nl
DNSSEC
Sta,s,cs
4

5. Next
Steps
o DNSSEC
Secure
Transfers
o DNSSEC
“ T3”
(enable
resolving
@
ISPs)
o DNSSEC
Health
Monitor
o Registrant
communicaLon
program
5

6. Q&A
Daniël
Federer
SIDN
+31
6
46
32
74
28
daniel.federer@sidn.nl
www.sidn.nl
6