DANE - DNSSEC for Application Security
Some DANE resources.
DANE tools ..
- gen_tlsa: Generate a DNS TLSA record
- danecheck: Test a configured DANE TLS Service
- danecheck-smtp: Test a configured DANE TLS SMTP Service
- openpgpkey: Generate a DNS OPENPGPKEY record
- DANE TLS Test Sites (hosted at huque.com)
- Go Library for DANE Authentication
IETF Technical Specifications ..
- RFC 6698: DANE and TLSA record specification
- RFC 7671: DANE Protocol: Updates and Operational Guidance
- RFC 7672: SMTP Security via opportunistic DANE TLS
- RFC 7673: Using DANE TLSA Records with SRV Records
- I-D: A DANE and DNSSEC Authentication Chain Extension for TLS
- I-D: Client Certificates in DANE TLSA Records
- I-D: TLS Extension for DANE Client Identity
- I-D: TLS sessions in SIP using DANE TLSA Records
Articles and talks ..
- Whither DANE? -- APNIC Blog; July 05 2019
-
How DANE Strengthens Security for TLS, S/MIME, and Other Applications;
November 20th 2015
CircleID magazine -
Next Steps in DANE Adoption;
October 3rd 2015
DNS-OARC Fall 2015 Workshop, Montreal, Canada -
DANE and Application Uses of DNSSEC; October 29th 2014
Internet2 Technology Exchange, Indianapolis, IN -
DNSSEC and Certificates; October 19th 2012
Shumon Huque's blog