• Monday 9 April 2018 Knowledge bank

    Support for secure transfer of signed domains now complete

    February 2014 Although DNSSEC was formally introduced to the Netherlands in 2012, the transfer of secure domains remained a problem for a long time. After all, when transferring a signed domain, the registrant will normally want to know that the domain will remain secure, not only after the new registrar takes control, but also while the transfer is in progress. A transfer protocol that made that possible was devised several years ago by Antoin Verschuren, Technical Advisor at SIDN, and has since been standardised by the IETF. However, the new transfer procedure required the receiving registrar and the releasing registrar to exchange key material: something that SIDN's registry interface didn't support at the time. Last year, a new EPP command was therefore developed: key relay. Now that PowerDNS — the most widely used DNS server for signed domains — officially supports the publication of external key material, the chain is complete. Signed domains can now be transferred between registrars securely and automatically. In the summer, Monshouwer became the first registrar to implement and use the entire transfer protocol.

    Afbeelding van Support for secure transfer of signed domains now complete
    Read more
  • Wednesday 11 April 2018 Knowledge bank

    EPP 'key relay': a structural solution for the DNSSEC transfer problem

    Autumn 2013 This summer, a structural solution for the transfer of DNSSEC-enabled domains became available. SIDN's EPP interface has been extended to support a new 'key relay' command, meaning that a domain can now be transferred without interrupting its secure status. What's more, the transaction can be fully automated. Registrars and software providers can incorporate the new functionality into their own dashboards and interfaces thus make it available to their own users. A significant obstacle to further DNSSEC adoption has therefore been removed.

    Afbeelding van EPP 'key relay': a structural solution for the DNSSEC transfer problem
    Read more
  • Tuesday 31 October 2017 Knowledge

    Free technology package for 2,700 primary schools

    Prepare primary school students for the digital future

    Afbeelding van Free technology package for 2,700 primary schools
    Read more