National Telecommunications and Information Administration

You are here: > NTIA Home > DNS > DNSSEC | Contact NTIA

About NTIA

Issues

NTIA Offices
• Asst. Secretary
• Domestic Policy
• International
• Spectrum
• Telecom Research
• Grants

Public Notices

Publications &
Reports

Media & Press

Speeches

NTIA Jobs

Dept. of Commerce

Domain Name System Security Extensions (DNSSEC)

The U.S. Department of Commerce's National Telecommunications and Information Administration (NTIA) and National Institute of Standards are working with the Internet Corporation for Assigned Names and Numbers (ICANN) and VeriSign on an initiative to enhance the security and stability of the Internet. The parties are working on an interim approach to deployment of a security technology -- Domain Name System Security Extensions (DNSSEC) -- at the authoritative root zone of the Internet. There will be further consultations with the Internet technical community as the testing and implementation documentation are developed.

Important Documents
Testing and Implementation Requirements for the Initial Deployment of DNSSEC in the Authoritative Root Zone: This requirements document was drafted jointly by the National Telecommunications and Information Administration and the National Institute of Standards and Technology. The purpose is to provide baseline architecture, security, and basic functionality requirements for the implementation and operation of DNSSEC at the root zone. NTIA and NIST have consulted with members of the Internet technical community as well as with its root zone management partners – ICANN and VeriSign. To the extent possible, input resulting from these consultations is reflected in the requirements.

Draft Documents
DNSSEC Root Zone High Level Technical Architecture (Working draft): This working draft document, prepared by ICANN and VeriSign, describes their proposed architecture for DNSSEC deployment at the root. The document is intended to be a high-level description of the design. More in-depth details are to be contained in accompanying documentation.

ICANN DNSSEC Policy and Practice Statement (Working draft): States practices and provisions employed in root zone signing and zone distribution services.

VeriSign DNSSEC Policy and Practice Statement (Working draft): States practices and provisions employed in root zone signing and zone distribution services.

NTIA Requested Public Comments Regarding the Deployment of DNSSEC

NTIA consulted with interested stakeholders regarding the deployment of DNS Security Extensions (DNSSEC) in the DNS hierarchy, including the authoritative root zone level. The Notice of Inquiry (NOI) was published in the Federal Register on October 9, 2008. Comments were due on November 24, 2008.