As part of the global effort to improve the security of DNS, amongst other registries Nominet is implementing DNSSEC in the zones under its management.
DNSSEC prevents the interception of and tampering with DNS queries between nameservers, making the Internet safer.
As announced at the .uk registrar conference in November, the first phase of this programme is to add DNSSEC information to the top-level .uk domain. This was implemented on Monday 1 March 2010, following the timetable below:
1. On Monday 22 February 2010, Nominet lowered the TTL (time-to-live) of entries in the uk zone from two days to three hours.
2. On Monday 1 March 2010, Nominet introduced DNSSEC information into five of the eleven UK nameservers (ns1.nic.uk, nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk). During the following week, Nominet will monitor the traffic on all its nameservers to look for any significant change in access patterns to ensure optimal performance.
3. On Monday 8 March 2010 the obscured keys will be replaced by real keys and DNSSEC rolled out to all .uk nameservers. With the signing of the root so close (scheduled for mid-2010), Nominet has taken the decision not to include the keys in the major DNSSEC key stores .Instead, they will use the period as an extended operational test, waiting until the root goes live before publishing their trust anchor in the root zone.
4. One week after the rollout to all UK nameservers (15 March 2010), Nominet will reset the TTLs of records in the .uk zone from three hours to two days.
For more details check out www.nominet.org.uk
- Follow us on :
