Pro DNS and BIND 10

Chapter 10. DNS Secure Configurations

At the macro level, the DNS service is essential to the operation of the Internet. At the micro or local level, the DNS service could be essential to the operation of an enterprise or a humble but much-loved family web site. In all cases, the appropriate investment in security must be made to ensure the effectiveness and safety of the DNS system. The DNS is by its nature a public system and acts like a honeypot for the bad bees of the Internet world. This chapter and Chapter 11 introduce DNS security with the intent of allowing the reader to select the appropriate techniques for the perceived level of threat.

Unfortunately, the term DNSSEC has a bad reputation because of its perceived complexity and is frequently ...