danectl - DNSSEC DANE implementation manager. What's DNSSEC? Secure DNS that you can trust. It has become really easy lately. What's DANE? Publishing your TLS keys as secure DNS records (TLSA SSHFP OPENPGPKEY SMIMEA) to prevent impersonation or man-in-the-middle attacks. It could eventually render certificate authorities unnecessary. Currently, it's mostly used for mail servers that want to stop anyone intercepting their incoming email. But the idea also applies to SSH host keys, and OpenPGP a
Knot DNS is a high performance authoritative-only DNS server. It supports all key features of the domain name system including zone transfers, dynamic updates, and DNSSEC.
|