DNSSEC Logo is now issued by http://www.dnssec-logo.org/.
Once a domain is submitted, the zone admininistrator mentioned in the SOA record will receive an email on how to proceed. There are three levels of certification:
Bronze - Zone is properly maintained, i.e. passes classical zone checks, and is correctly signed.
Silver - The KSK of the zone is correctly refered by the parent zone (if signed) or registered at one of the common TARs. During the last six months a ZSK rollover following the procedures of RFC 5011 was observed.
Gold - During the last year a KSK rollover following the procedures of RFC 5011 including the parental delegations was observed. Access is granted to the zone contents for exhaustive RRSIG checks.
I shall apply for DNSSEC logo in order to test my capability of managing DNSSEC.
No comments:
Post a Comment