DNSSec Courses and Certifications

What is DNSSEC - Domain Name System Security Extensions

Discover how DNSSEC protects against DNS hijacking, ensures online data integrity, and enhances website security. Learn implementation steps for robust protection.

• YouTube
• 11 minutes
• On-Demand
• Free Video

USENIX

Your Shield is My Sword - A Persistent Denial-of-Service Attack via the Reuse of Unvalidated Caches in DNSSEC Validation

Uncover a novel DNSSEC vulnerability where troubleshooting mechanisms enable persistent DoS attacks, affecting major DNS services and lasting over 24 hours.

• YouTube
• 12 minutes
• On-Demand
• Free Video

Black Hat

How the Internet Dodged a Bullet: The KeyTrap Denial-of-Service Attacks against DNSSEC

Discover the devastating KeyTrap attacks on DNSSEC that allow comprehensive DoS of DNS resolvers, threatening global internet stability, and learn about the complex disclosure and patching process for this critical vulnerability.

• YouTube
• 39 minutes
• On-Demand
• Free Video

DNSSec Today

Explore the current state of DNSSec, its implementation challenges, and its role in enhancing DNS security and integrity in modern networks.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

DNSSUX - Why DNSSEC Makes Us Weaker

Explore DNSSEC's vulnerabilities, zone enumeration risks, and alternative approaches to DNS security in this critical analysis of current protocols and future solutions.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Black Hat

DNSSEC Downgrade Attacks

Explore DNSSEC vulnerabilities and cryptographic agility risks, revealing how adversaries can manipulate DNS responses to compromise security and prevent DNSSEC validation.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Black Hat

Preventing Child Neglect in DNSSEC-bis Using Lookaside Validation

Explore DNSSEC-bis and Lookaside Validation techniques to enhance DNS security and prevent child neglect in domain name systems.

• YouTube
• 1 hour 17 minutes
• On-Demand
• Conference Talk

Black Hat

IPsec - Opportunistic Encryption Using DNSSEC

Explore opportunistic encryption using DNSSEC for IPsec implementation, enhancing network security and data protection without manual configuration.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Securing DNSSEC with Ritual and Ceremony - How Neo-Victorians Keep Out Cads and Bounders

Explore the social factors and ritualized behaviors crucial for DNSSEC key signing ceremonies, examining participant selection, hierarchies, and trust distribution to ensure cryptographic operation credibility.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

IEEE

Enumerating Active IPv6 Hosts for Large-Scale Security Scans via DNSSEC-Signed Reverse Zones

Discover a novel technique for enumerating active IPv6 addresses through DNSSEC-signed reverse zones, revealing significant security vulnerabilities in IPv6-connected devices and infrastructure.

• YouTube
• 21 minutes
• On-Demand
• Free Video

DNSSec Explained

Explore DNSSec implementation, setup, frequency, and applications in national labs. Learn from expert insights and engage in Q&A on this crucial internet security protocol.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

QuICS

Post-Quantum Signatures in DNSSEC via Request-Based Fragmentation - Session 5

Explore post-quantum signatures in DNSSEC through request-based fragmentation, enhancing DNS security for the quantum era.

• YouTube
• 25 minutes
• On-Demand
• Free Video

NANOG

DNSSEC-Related Outages: Analysis and Impact Assessment in DNS Security

Explore real-world DNSSEC deployment challenges and outages through evidence-based analysis, comparing impacts with other cryptographic systems like X.509 and RPKI to inform operational decisions.

• YouTube
• 32 minutes
• On-Demand
• Free Video

TheIACR

Field Experiments on Post-Quantum DNSSEC

Explore real-world experiments and findings on Post-Quantum DNSSEC implementation as presented at Real World Crypto 2025, focusing on practical deployment challenges and solutions.

• YouTube
• 19 minutes
• On-Demand
• Free Video

nullcon

Finding Insecure Cryptographic Keys in DKIM, DNSSEC, OpenID Connect and Elsewhere

Discover vulnerabilities in cryptographic keys across DKIM, DNSSEC, and OpenID Connect using the badkeys tool. Learn to identify security flaws in public key cryptography implementations.

• YouTube
• 24 minutes
• On-Demand
• Free Video