DNSSEC Overview
- ICANN DNSSEC Introduction and Resources
- Internet Society DNSSEC Deployment Guide
- Wikipedia: DNSSEC
- A Fundamental Look at DNSSEC, Deployment, and DNS Security Extensions, Geoff Huston
DNSSEC Keys (KSK, ZSK, DNSKEY)
- RFC 4033 - DNS Security Introduction and Requirements
- RFC 4034 - Resource Records for DNSSEC
- RFC 4035 - Protocol Modifications for DNSSEC
DNSSEC Key Rollovers
- RFC 6781 - DNSSEC Operational Practices, Version 2
- RFC 7583 - DNSSEC Key Rollover Timing Considerations
Key Compromise and Security Best Practices
- NIST Cybersecurity Framework Resources
- RFC 6781 - DNSSEC Operational Practices (Key Management and Emergency Rollovers)
DS Records and Chain of Trust
DNSSEC Validation
Authentication vs. Confidentiality
DNSSEC Threats and Mitigations