DNSSEC deployment testing and awareness (Was: Re: IPv4 ANYCAST setup)

[Phil Regnauld <regnauld () nsrc org>]

Randy Bush (randy) writes:
> i.e. what can we do to maximize the odds that the victim will quickly
> find the perp, as opposed to calling our our tech support lines?

        Ah yes, there was the second good reason for actually helping netops
        and security officers :)

        Tools:

        https://www.dns-oarc.net/oarc/services/replysizetest

        https://www.dnssec-deployment.org/wiki/index.php/Tools_and_Resources,
        under troubleshooting:
                http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues
                http://secspider.cs.ucla.edu/

        Info sheets:

        
http://www.afnic.fr/actu/nouvelles/240/l-afnic-invite-les-responsables-techniques-reseaux-a-se-preparer-a-la-signature-de-la-racine-dns-en-mai-2010
        (click English, top right)

        ... plenty of links there too.

        Cheers,
        Phil