Domain Name System Security Extensions (English Wikipedia)

Memorandum For Chief Information Officers Archived 2008-09-16 at the Wayback Machine Executive Office Of The President — Office Of Management And Budget, 22 August 2008

arin.net (Global: low place; English: low place)

ARIN DNSSEC Deployment Plan

athene-center.de (Global: low place; English: low place)

Elias Heftrig; Haya Schulmann; Niklas Vogel; Michael Waidne. "The KeyTrap Denial-of-Service Algorithmic Complexity Attacks on DNS Version: January 2024" (PDF). ATHENE. (press release)

bu.edu (Global: 2,120^th place; English: 1,328^th place)

cs.bu.edu

"NSEC5: Provably Preventing DNSSEC Zone Enumeration".

chromium.org (Global: 7,618^th place; English: 5,519^th place)

git.chromium.org

"chromium git". Retrieved 2013-03-09.

circleid.com (Global: low place; English: low place)

cloudflare.com (Global: 8,991^st place; English: 6,535^th place)

blog.cloudflare.com

"Economical With The Truth: Making DNSSEC Answers Cheap". 2016-06-24.
"DNSSEC Done Right". 2015-01-29.

comcast.com (Global: low place; English: low place)

blog.comcast.com

Comcast Blog - DNS Security Rollout Begins, October 18, 2010
Comcast Completes DNSSEC Deployment, January 11, 2012

comcast.net (Global: 3,523^rd place; English: 2,490^th place)

dnssec.comcast.net

Comcast DNSSEC Public Service Announcement Video Archived 2010-10-21 at the Wayback Machine, October 18, 2010

dns-oarc.net (Global: low place; English: low place)

indico.dns-oarc.net

Wessels, Duane. "Transitioning Verisign's TLDs to Elliptic Curve DNSSEC". DNS-OARC. Retrieved 29 January 2024.

dns-oarc.net

DNSSEC in Windows Server

dnssec-deployment.org (Global: low place; English: low place)

DNSSEC Deployment Initiative Newsletter - Volume 1, Number 2 Archived November 22, 2007, at the Wayback Machine, June 2006

dnssec-validator.cz (Global: low place; English: low place)

"DNSSEC/TLSA Validator".

dnssec.nl (Global: low place; English: low place)

archief.dnssec.nl

DNSSEC en IPv6 vanaf 2014 verplicht bij ICANN

doc.gov (Global: low place; English: 8,528^th place)

ntia.doc.gov

"Press Release: NTIA Seeks Public Comments for the Deployment of Security Technology Within the Internet Domain Name System" (Press release). National Telecommunications and Information Administration, U.S. Department of Commerce. October 9, 2008. Archived from the original on 2008-10-13. Retrieved 2008-10-09.

doi.org (Global: 2^nd place; English: 2^nd place)

Herzberg, Amir; Shulman, Haya (2014). "Retrofitting Security into Network Protocols: The Case of DNSSEC". IEEE Internet Computing. 18 (1). pp. 66–71. doi:10.1109/MIC.2014.14. ISSN 1089-7801. S2CID 12230888.
Rose, Scott; Larson, Matt; Massey, Dan; Austein, Rob; Arends, Roy (March 2005). RFC 4033: DNS Security Introduction and Requirements. The Internet Society. p. 11. doi:10.17487/RFC4033. Stub resolvers, by definition, are minimal DNS resolvers that use recursive query mode to offload most of the work of DNS resolution to a recursive name server. An earlier definition was given in an earlier RFC: Robert Braden (October 1989). Braden, R. (ed.). RFC 1123 - Requirements for Internet Hosts -- Application and Support. IETF (Internet Engineering Task Force). p. 74. doi:10.17487/RFC1123. A "stub resolver" relies on the services of a recursive name server [...]
Rose, Scott; Larson, Matt; Massey, Dan; Austein, Rob; Arends, Roy (March 2005). RFC 4033: DNS Security Introduction and Requirements. The Internet Society. p. 12. doi:10.17487/RFC4033.
Authenticated Denial of Existence in the DNS. doi:10.17487/RFC7129. RFC 7129.
Mekking, W.; Mahoney, D. (March 2020). Moving DNSSEC Lookaside Validation (DLV) to Historic Status. IETF. doi:10.17487/RFC8749. RFC 879. Retrieved 3 June 2020.

epic.org (Global: low place; English: low place)

Electronic Privacy Information Center (EPIC) (May 27, 2008). DNSSEC

gmu.edu (Global: 3,837^th place; English: 2,524^th place)

maps.dnssec.gmu.edu

Center for Assurance Research and Engineering. "DNSSEC Deployment Maps". George Mason University. Retrieved September 25, 2025.

googleblog.com (Global: 1,272^nd place; English: 837^th place)

security.googleblog.com

Google Public DNS Now Supports DNSSEC Validation Google Code Blog, 1 June 2013

h-online.com (Global: low place; English: low place)

More security for root DNS servers Heise Online, 24 March 2010

heise.de (Global: 766^th place; English: 3,515^th place)

Department of Homeland and Security wants master key for DNS Archived April 6, 2007, at the Wayback Machine Heise News, 30 March 2007

iana.org (Global: 1,884^th place; English: 1,694^th place)

icann.org (Global: 2,810^th place; English: 1,907^th place)

icann.org

"Root Zone KSK Algorithm Rollover - ICANN". www.icann.org. Retrieved 29 January 2024.

ccnso.icann.org

Myles, Patrick (25 September 2014). "GNSO Activity Update for ccNSO Council meeting" (PDF). Retrieved 2025-08-08.

ieee.org (Global: 652^nd place; English: 515^th place)

ieeexplore.ieee.org

Herzberg, Amir; Shulman, Haya (2014). "Retrofitting Security into Network Protocols: The Case of DNSSEC". IEEE Internet Computing. 18 (1). pp. 66–71. doi:10.1109/MIC.2014.14. ISSN 1089-7801. S2CID 12230888.

ietf.org (Global: 214^th place; English: 176^th place)

datatracker.ietf.org

Service binding and parameter specification via the DNS (DNS SVCB and HTTPS RRS).
TLS Encrypted Client Hello.
IETF: DNS-based Authentication of Named Entities (dane)
Authenticated Denial of Existence in the DNS. doi:10.17487/RFC7129. RFC 7129.
"Black Lies". Compact DNSSEC Denial of Existence or Black Lies. sec. 2. I-D draft-valsorda-dnsop-black-lies.
Mekking, W.; Mahoney, D. (March 2020). Moving DNSSEC Lookaside Validation (DLV) to Historic Status. IETF. doi:10.17487/RFC8749. RFC 879. Retrieved 3 June 2020.

tools.ietf.org

Rose, Scott; Larson, Matt; Massey, Dan; Austein, Rob; Arends, Roy (March 2005). RFC 4033: DNS Security Introduction and Requirements. The Internet Society. p. 11. doi:10.17487/RFC4033. Stub resolvers, by definition, are minimal DNS resolvers that use recursive query mode to offload most of the work of DNS resolution to a recursive name server. An earlier definition was given in an earlier RFC: Robert Braden (October 1989). Braden, R. (ed.). RFC 1123 - Requirements for Internet Hosts -- Application and Support. IETF (Internet Engineering Task Force). p. 74. doi:10.17487/RFC1123. A "stub resolver" relies on the services of a recursive name server [...]
Rose, Scott; Larson, Matt; Massey, Dan; Austein, Rob; Arends, Roy (March 2005). RFC 4033: DNS Security Introduction and Requirements. The Internet Society. p. 12. doi:10.17487/RFC4033.

ietf.org

"Black Lies". Compact DNSSEC Denial of Existence or Black Lies. sec. 2. I-D draft-valsorda-dnsop-black-lies.

imperialviolet.org (Global: low place; English: low place)

"ImperialViolet". Retrieved 2011-11-26.

infoworld.com (Global: 3,696^th place; English: 2,428^th place)

The InfoWorld 2011 Technology Leadership Awards

internetnews.com (Global: low place; English: 8,800^th place)

Sean Michael Kerner. ".ORG the Most Secure Domain?". internetnews.com. Retrieved 2008-09-27.

isc.org (Global: low place; English: low place)

ISC Launches DLV registry to kick off worldwide DNSSEC deployment Archived November 18, 2008, at the Wayback Machine
ISC Launches DLV registry to kick off worldwide DNSSEC deployment Archived June 14, 2011, at the Wayback Machine
"DLV Replaced With Signed Empty Zone - Internet Systems Consortium". isc.org. 30 September 2017. Retrieved 2020-06-05.
"BIND 9.16.0, Stable Branch for 2020 and Beyond - Internet Systems Consortium". isc.org. 20 February 2020. Retrieved 2020-06-05.

mail-archive.com (Global: 8,986^th place; English: 8,081^st place)

UPI Analysis: Owning the keys to the Internet March 24, 2011 - First link is dead, this is believed to be the same content

microsoft.com (Global: 153^rd place; English: 151^st place)

technet.microsoft.com

"Understanding DNSSEC in Windows". Microsoft. October 7, 2009. The Windows DNS client is a stub resolver...
"DNS Security Extensions (DNSSEC)". Microsoft. October 21, 2009. The DNS client in Windows Server 2008 R2 and Windows® 7 is a non-validating security-aware stub resolver.

techcommunity.microsoft.com

"Implementing Inbound SMTP DANE with DNSSEC for Exchange Online Mail Flow". TECHCOMMUNITY.MICROSOFT.COM. Retrieved 2024-05-28.

mozilla.org (Global: 1,686^th place; English: 1,293^rd place)

bugzilla.mozilla.org

Bugzilla@Mozilla: Bug 672600 - Use DNSSEC/DANE chain stapled into TLS handshake in certificate chain validation

networkworld.com (Global: 4,121^st place; English: 2,662^nd place)

VeriSign: We will support DNS security in 2011 Archived March 3, 2009, at the Wayback Machine
Hutchinson, James (6 May 2010). "ICANN, Verisign place last puzzle pieces in DNSSEC saga". NetworkWorld. Archived from the original on 20 December 2013. Retrieved 17 May 2010.
Feds tighten security on .gov Archived September 25, 2008, at the Wayback Machine Network World, 22 September 2008

nist.gov (Global: 355^th place; English: 454^th place)

"Commerce Department to Work with ICANN and VeriSign to Enhance the Security and Stability of the Internet's Domain Name and Addressing System" (Press release). National Institute of Standards and Technology. 3 June 2009. Archived from the original on 29 June 2011. Retrieved 13 July 2017.

nlnetlabs.nl (Global: low place; English: low place)

"Unbound 1.5.4 Changes". NLnet Labs. Retrieved 2020-06-05.

pir.org (Global: low place; English: low place)

.ORG is the first open TLD signed with DNSSEC
".ORG Registrar List — with DNSSEC enabled at the top". Archived from the original on 2010-06-12. Retrieved 2010-06-23.

psu.edu (Global: 207^th place; English: 136^th place)

citeseer.ist.psu.edu

"Using the Domain Name System for System Break-Ins" by Steve Bellovin, 1995

quad9.net (Global: low place; English: low place)

"Quad9 FAQ". Quad9. Retrieved July 7, 2018.

rfc-editor.org (Global: 6,184^th place; English: 4,465^th place)

Authenticated Denial of Existence in the DNS. doi:10.17487/RFC7129. RFC 7129.
Mekking, W.; Mahoney, D. (March 2020). Moving DNSSEC Lookaside Validation (DLV) to Historic Status. IETF. doi:10.17487/RFC8749. RFC 879. Retrieved 3 June 2020.

ripe.net (Global: low place; English: low place)

RIPE NCC DNSSEC Policy Archived October 22, 2007, at the Wayback Machine
Eklund-Löwinder, Anne-Marie (12 February 2012). "[dns-wg] Swedish ISP TCD Song Adopts DNSSEC". dns-wg mailing list. RIPE NCC. Retrieved 2 December 2012.
dns-wg archive: Signed zones list Archived March 5, 2007, at the Wayback Machine
"DNSSEC for the Root Zone" (PDF).

semanticscholar.org (Global: 11^th place; English: 8^th place)

api.semanticscholar.org

Herzberg, Amir; Shulman, Haya (2014). "Retrofitting Security into Network Protocols: The Case of DNSSEC". IEEE Internet Computing. 18 (1). pp. 66–71. doi:10.1109/MIC.2014.14. ISSN 1089-7801. S2CID 12230888.

sidn.nl (Global: low place; English: low place)

Majority of Dutch domains and internet users have DNSSEC security
Ubbink, Stefan. "New DNSSEC algorithm for .nl". www.sidn.nl. Retrieved 29 January 2024.

technet.com (Global: 9,482^nd place; English: 6,202^nd place)

blogs.technet.com

Seshadri, Shyam (11 November 2008). "DNSSEC on Windows 7 DNS client". Port 53. Microsoft.

uc3m.es (Global: low place; English: low place)

netcom.it.uc3m.es

Muñoz Merino, Pedro J.; García-Martínez, Alberto; Organero, Mario Muñoz; Kloos, Carlos Delgado (2006). Meersman, Robert; Tari, Zahir; Herrero, Herrero Martín (eds.). Enabling Practical IPsec Authentication for the Internet (PDF). On the Move to Meaningful Internet Systems 2006: OTM 2006 Workshops. Vol. 1. Springer. Archived from the original (PDF) on 2012-04-26.

upi.com (Global: 290^th place; English: 202^nd place)

Analysis: of Owning the keys to the Internet UPI, April 21, 2007

us-cert.gov (Global: low place; English: low place)

U.S. National Strategy to Secure Cyberspace, p. 30 February 2003

usenix.org (Global: 5,990^th place; English: 3,752^nd place)

Metzger, Perry; William Allen Simpson & Paul Vixie. "Improving TCP security with robust cookies" (PDF). Usenix. Retrieved 2009-12-17.

v3.co.uk (Global: low place; English: low place)

"Computing - the UK's leading source for the analysis of business technology".

verisign.com (Global: low place; English: low place)

verisign.com

"DNSSEC Scoreboard". Verisign. Retrieved September 25, 2025.

blog.verisign.com

Wessels, Duane (10 August 2023). "Verisign Will Help Strengthen Security with DNSSEC Algorithm Update". Verisign Blog. Retrieved 29 January 2024.

web.archive.org (Global: 1^st place; English: 1^st place)

Interview with Dan Kaminsky on DNSSEC (25 Jun 2009) Kaminsky interview: DNSSEC addresses cross-organizational trust and security
Muñoz Merino, Pedro J.; García-Martínez, Alberto; Organero, Mario Muñoz; Kloos, Carlos Delgado (2006). Meersman, Robert; Tari, Zahir; Herrero, Herrero Martín (eds.). Enabling Practical IPsec Authentication for the Internet (PDF). On the Move to Meaningful Internet Systems 2006: OTM 2006 Workshops. Vol. 1. Springer. Archived from the original (PDF) on 2012-04-26.
RIPE NCC DNSSEC Policy Archived October 22, 2007, at the Wayback Machine
dns-wg archive: Signed zones list Archived March 5, 2007, at the Wayback Machine
ISC Launches DLV registry to kick off worldwide DNSSEC deployment Archived November 18, 2008, at the Wayback Machine
".ORG Registrar List — with DNSSEC enabled at the top". Archived from the original on 2010-06-12. Retrieved 2010-06-23.
VeriSign: We will support DNS security in 2011 Archived March 3, 2009, at the Wayback Machine
"VeriSign: Major internet security update by 2011". Archived from the original on 2009-11-19. Retrieved 2009-11-18.
"Press Release: NTIA Seeks Public Comments for the Deployment of Security Technology Within the Internet Domain Name System" (Press release). National Telecommunications and Information Administration, U.S. Department of Commerce. October 9, 2008. Archived from the original on 2008-10-13. Retrieved 2008-10-09.
"Commerce Department to Work with ICANN and VeriSign to Enhance the Security and Stability of the Internet's Domain Name and Addressing System" (Press release). National Institute of Standards and Technology. 3 June 2009. Archived from the original on 29 June 2011. Retrieved 13 July 2017.
Hutchinson, James (6 May 2010). "ICANN, Verisign place last puzzle pieces in DNSSEC saga". NetworkWorld. Archived from the original on 20 December 2013. Retrieved 17 May 2010.
"DNSSEC to become standard on .ORG domains by end of June". Archived from the original on 2010-03-15. Retrieved 2010-03-24.
The Inquirer: Verisign deploys DNSSEC on .com TLD
ISC Launches DLV registry to kick off worldwide DNSSEC deployment Archived June 14, 2011, at the Wayback Machine
Department of Homeland and Security wants master key for DNS Archived April 6, 2007, at the Wayback Machine Heise News, 30 March 2007
DNSSEC Deployment Initiative Newsletter - Volume 1, Number 2 Archived November 22, 2007, at the Wayback Machine, June 2006
Memorandum For Chief Information Officers Archived 2008-09-16 at the Wayback Machine Executive Office Of The President — Office Of Management And Budget, 22 August 2008
Feds tighten security on .gov Archived September 25, 2008, at the Wayback Machine Network World, 22 September 2008
Comcast DNSSEC Public Service Announcement Video Archived 2010-10-21 at the Wayback Machine, October 18, 2010

wired.com (Global: 193^rd place; English: 152^nd place)

blog.wired.com

Singel, Ryan (October 8, 2006). "Feds Start Moving on Net Security Hole". Wired News. CondéNet. Retrieved 2008-10-09.

worldcat.org (Global: 5^th place; English: 5^th place)

search.worldcat.org

Herzberg, Amir; Shulman, Haya (2014). "Retrofitting Security into Network Protocols: The Case of DNSSEC". IEEE Internet Computing. 18 (1). pp. 66–71. doi:10.1109/MIC.2014.14. ISSN 1089-7801. S2CID 12230888.

zdnet.co.uk (Global: low place; English: low place)

news.zdnet.co.uk

"VeriSign: Major internet security update by 2011". Archived from the original on 2009-11-19. Retrieved 2009-11-18.

Domain Name System Security Extensions (English Wikipedia)

apnic.net (Global: low place; English: low place)

blog.apnic.net

stats.labs.apnic.net

archive.today (Global: 14th place; English: 14th place)

archives.gov (Global: 446th place; English: 308th place)

obamawhitehouse.archives.gov

arin.net (Global: low place; English: low place)

athene-center.de (Global: low place; English: low place)

bu.edu (Global: 2,120th place; English: 1,328th place)

cs.bu.edu

chromium.org (Global: 7,618th place; English: 5,519th place)

git.chromium.org

circleid.com (Global: low place; English: low place)

cloudflare.com (Global: 8,991st place; English: 6,535th place)

blog.cloudflare.com

comcast.com (Global: low place; English: low place)

blog.comcast.com

comcast.net (Global: 3,523rd place; English: 2,490th place)

dnssec.comcast.net

dns-oarc.net (Global: low place; English: low place)

indico.dns-oarc.net

dns-oarc.net

dnssec-deployment.org (Global: low place; English: low place)

dnssec-validator.cz (Global: low place; English: low place)

dnssec.nl (Global: low place; English: low place)

archief.dnssec.nl

doc.gov (Global: low place; English: 8,528th place)

ntia.doc.gov

doi.org (Global: 2nd place; English: 2nd place)

epic.org (Global: low place; English: low place)

gmu.edu (Global: 3,837th place; English: 2,524th place)

maps.dnssec.gmu.edu

googleblog.com (Global: 1,272nd place; English: 837th place)

security.googleblog.com

h-online.com (Global: low place; English: low place)

heise.de (Global: 766th place; English: 3,515th place)

iana.org (Global: 1,884th place; English: 1,694th place)

iana.org

data.iana.org

itar.iana.org

icann.org (Global: 2,810th place; English: 1,907th place)

icann.org

ccnso.icann.org

ieee.org (Global: 652nd place; English: 515th place)

ieeexplore.ieee.org

ietf.org (Global: 214th place; English: 176th place)

datatracker.ietf.org

tools.ietf.org

ietf.org

imperialviolet.org (Global: low place; English: low place)

infoworld.com (Global: 3,696th place; English: 2,428th place)

internetnews.com (Global: low place; English: 8,800th place)

isc.org (Global: low place; English: low place)

mail-archive.com (Global: 8,986th place; English: 8,081st place)

microsoft.com (Global: 153rd place; English: 151st place)

technet.microsoft.com

techcommunity.microsoft.com

mozilla.org (Global: 1,686th place; English: 1,293rd place)

bugzilla.mozilla.org

networkworld.com (Global: 4,121st place; English: 2,662nd place)

nist.gov (Global: 355th place; English: 454th place)

nlnetlabs.nl (Global: low place; English: low place)

pir.org (Global: low place; English: low place)

psu.edu (Global: 207th place; English: 136th place)

citeseer.ist.psu.edu

quad9.net (Global: low place; English: low place)

rfc-editor.org (Global: 6,184th place; English: 4,465th place)

ripe.net (Global: low place; English: low place)

semanticscholar.org (Global: 11th place; English: 8th place)

api.semanticscholar.org

sidn.nl (Global: low place; English: low place)

technet.com (Global: 9,482nd place; English: 6,202nd place)

blogs.technet.com

uc3m.es (Global: low place; English: low place)

netcom.it.uc3m.es

upi.com (Global: 290th place; English: 202nd place)

us-cert.gov (Global: low place; English: low place)

usenix.org (Global: 5,990th place; English: 3,752nd place)

v3.co.uk (Global: low place; English: low place)

archive.today (Global: 14^th place; English: 14^th place)

archives.gov (Global: 446^th place; English: 308^th place)

bu.edu (Global: 2,120^th place; English: 1,328^th place)

chromium.org (Global: 7,618^th place; English: 5,519^th place)

cloudflare.com (Global: 8,991^st place; English: 6,535^th place)

comcast.net (Global: 3,523^rd place; English: 2,490^th place)

doc.gov (Global: low place; English: 8,528^th place)

doi.org (Global: 2^nd place; English: 2^nd place)

gmu.edu (Global: 3,837^th place; English: 2,524^th place)

googleblog.com (Global: 1,272^nd place; English: 837^th place)

heise.de (Global: 766^th place; English: 3,515^th place)

iana.org (Global: 1,884^th place; English: 1,694^th place)

icann.org (Global: 2,810^th place; English: 1,907^th place)

ieee.org (Global: 652^nd place; English: 515^th place)

ietf.org (Global: 214^th place; English: 176^th place)

infoworld.com (Global: 3,696^th place; English: 2,428^th place)

internetnews.com (Global: low place; English: 8,800^th place)

mail-archive.com (Global: 8,986^th place; English: 8,081^st place)

microsoft.com (Global: 153^rd place; English: 151^st place)

mozilla.org (Global: 1,686^th place; English: 1,293^rd place)

networkworld.com (Global: 4,121^st place; English: 2,662^nd place)

nist.gov (Global: 355^th place; English: 454^th place)

psu.edu (Global: 207^th place; English: 136^th place)

rfc-editor.org (Global: 6,184^th place; English: 4,465^th place)

semanticscholar.org (Global: 11^th place; English: 8^th place)

technet.com (Global: 9,482^nd place; English: 6,202^nd place)

upi.com (Global: 290^th place; English: 202^nd place)

usenix.org (Global: 5,990^th place; English: 3,752^nd place)

web.archive.org (Global: 1^st place; English: 1^st place)

wired.com (Global: 193^rd place; English: 152^nd place)

worldcat.org (Global: 5^th place; English: 5^th place)