Hosted by:


Gold Sponsors




Public Interest Registry


Silver Sponsors


GMO Registry


ICM Registry


Iron Mountain




Bronze Sponsors






DNSSEC Workshop

Wed 08 Dec 2010 - 08:30 - 14:00
Transcript to be provided
Remote Participation - Low Bandwidth
Remote Participation - High Bandwidth

DNSSEC deployment is happening! The Root has now been signed and DNSSEC deployment across the globe is accelerating. The barriers to a full chain of trust have been removed and we are now entering an exciting phase where DNSSEC can become an operational reality for everyone.

This session is a public presentation and discussion with those actively engaged in the deployment of DNSSEC. The meeting begins with two in-depth panel discussions on both the marketing and operational implementation of DNSSEC around the world. The first panel discussion focuses on DNSSEC adoption issues for registries and registrars and tries to distinguish successful marketing approaches for DNSSEC. The second panel takes a look at the diversity of approaches for implementing DNSSEC across both registrars and registries, looking at how the size of each organization affects the tools and technologies deployed. The panel discussions will be followed by an overview of open-source DNSSEC tools, after which the uptake of DNSSEC validating resolvers will be presented by a group of leading ISP’s. During this contribution a sponsored lunch will be served. The session ends with an update on regional and worldwide DNSSEC deployment activities.

Why it's Important… Registries, registrars, ISP’s and others who plan to deploy DNSSEC services will benefit from the presentation and discussion of the deployment experience. Many TLDs, registrars and ISP’s are planning to deploy DNSSEC in the next two years and we anticipate that they will encounter similar operational and adoption issues. These issues will be discussed during the workshop in depth and all those involved in DNSSEC deployment will be able to share their experiences.

Who Should Attend? | Anyone with an interest in the deployment of DNSSEC, particularly registry, registrar and ISP representatives with technical, operational, and strategic planning roles.

Agenda Details:

DNSSEC Workshop at the ICANN Meeting in Cartagena, Colombia

Date: Wednesday, 08 December 2010 - 08:30 a.m. to 1:45 p.m.
Room: Getsemani


1. Capsule View of Adoption: Steve Crocker, Co-Chair, DNSSEC Deployment Initiative, DNSSEC Deployment Around the World

2. Panel Discussion: DNSSEC Adoption -- Best Practices on the Stimulation of the Deployment of DNSSEC in ccTLD and gTLD's: Moderator: Markus Travaille, SIDN; Panelists: James Bladel, GoDaddy; Matt Mansell, Mesh Digital/Domain Monster; Pavel Tuma, CZ.NIC; Lance Wolak, Public Interest Registry; and Chris Wright, AusRegistry

3. Incidents and Responses: Roy Arends, Nominet;

4. DNSSEC Lessons Learned: Roland van Rijswijk, SURFnet


5. DNSSEC Tool Development:

o Open Source Tools: Russ Mundy, Co-Chair, DNSSEC Deployment Initiative
o DNSSEC for Humans: João Damas, Internet Systems Consortium (ISC)
6. Panel Discussion: DNSSEC Implementation Approaches -- Experiences and Best

6. Practices on the Variety of DNSSEC Deployments Around the World: Moderator: Simon McCalla, Nominet UK; Panelists: Ondrej Filip, CZ NIC; Richard Lamb, ICANN; Matt Larson, VeriSign; Ram Mohan, Afilias; Rickard Bellgrim, Internet Infrastructure Foundation (.SE); João Damas, Internet Systems Consortium (ISC)

Sponsored Lunch Break

7. ISP Validation and Capability: Jason Livingood, Comcast

8. Activities from the Region: Nicolai Bezsonoff, .co Registry; Erick Iriarte Ahon, LACTLD; Ram Mohan, Afilias; and Frederico Neves,