Long term strategy for a successful deployment of DNSSEC – on all levels (Anne-Marie Eklund Löwinder, Patrik Wallström)
slides-itatws-long-term-strategy-for-a-successful-deployment-of-dnssec-00

For the time being about 25 per cent of the .se zone file is signed using DNSSEC, a standard published as RFC 4033, RFC 4034 and RFC 4035 in March 2005. A number of our largest registrars are currently working to sign all their customer zones. All the largest ISPs in Sweden have turned on DNSSEC validation on the resolvers for their customers. A number of companies, organizations, municipalities and state agencies have turned on validation on their internal DNS. During our journey from 2005 we have ran into a number of interesting challenges and difficulties. From that we’ve learned a lot about deployment, operations and value of cooperation. This paper is pointing out some areas with remaining challenges and where we are lacking a long term strategy for the overall successful deployment of DNSSEC.