Challenges and Opportunities In Deploying DNSSEC A progress report on an investigation into DNSSEC deployment

In the process of building a web portal[1] focused on providing real-world deployment information about DNS Security Extensions (DNSSEC), Internet Society staff identified a number of areas where DNSSEC deployment can be simplified for domain name holders, domain name infrastructure operators and domain name consumers (i.e. users of DNSSEC-signed domains). Some areas were predictably around the need for more education of consumers, businesses, developers and network operators about DNSSEC. Other areas, though, were more involved with the process involved in signing domains and also in bootstrapping the overall process of using DNSSEC. This paper outlines the challenges identified so far and offers suggestions on how to overcome those challenges.