plosher's blog

Preparing for a world consisting of larger DNS responses.

While many of you know ISC as the maintainer of the BIND DNS server software, we have always had our hand in the DNS operations field, including operating one of the 13 DNS root servers (F.ROOT-SERVERS.NET), as well as secondaring many ccTLD and non-commercial zones for over a decade. ISC has also been at the forefront of designing and implementing DNS Security Extensions (DNSSEC) which is a mechanism to cryptographically verify that the response given to a DNS request is correct.

The Signed Root Is Coming! (And what this means for you)

In the Fall of 2009, the organizations responsible for generating the root zone, ICANN, Verisign, and the US Department of Commerce, announced that they had come to a agreement on how to sign the root zone with DNSSEC (DNS Security Extensions) A website has been created by ICANN and Verisign to provide information about the change and a rollout timeline.

SNS@ISC Mission Critical Services

ISC resources and expertise that have served so many public benefit organizations and global TLDs since 1998 are now available with a Service Level Agreement and committed response times to address the needs of commercial businesses.