In 2011, the Restena Foundation signed the .lu zone it manages and operates using DNSSEC (Domain Name System Security Extensions) technology. Since then, and despite an operational infrastructure to effectively secure domain names, the number of DNSSEC-signed .lu domain names remains low. As of the first quarter 2022, they represent only 7%, whereas more than 80% of DNS requests sent from Luxembourg could benefit from it. It places Luxembourg at the rear of the European pack in terms of adoption. There is hence a real effort to make to fully exploit the existing DNSSEC infrastructure and increase the security of internet communications in Luxembourg.
To raise awareness and assist operators of electronic communication networks and services and operators of essential services in Luxembourg in their efforts to secure their networks and information systems, the Restena Foundation, acting as the .lu registry, and the Institut Luxembourgeois de Régulation (ILR) have published an information brochure.
DNSSEC (Domain Name System Security Extensions) technology authenticates DNS records using cryptographic keys to ensure that each domain fits perfectly into a trusted chain within the tree of the Internet-based naming system.
Entitled Domain Name Security, the brochure is dedicated to the security of domain names as a crucial part of the security of the essential services and thus a crucial part to the security of our society. It includes guidance and best practices for securing your online presence and assure a secure Domain Name Service. Examples and links to useful tools and lists are also referenced in this brochure organised along two main focuses.
Focus 1 - The Domain Name System (DNS), one of the core elements of the internet. | Focus 2 - DNS Security Extensions (DNSSEC), a solution to guarantee data integrity. |
---|---|
Information covered:
|
Information covered:
|
Domain Name Security was published as part of the first NISDUC (NIS Directive User Community) conference organised in Luxembourg on 11 and 12 May 2022 by the Institut Luxembourgeois de Régulation (ILR) and the Belgian Institute for Postal services and Telecommunications (BIPT) in collaboration with the Luxembourg Institute of Science and Technology (LIST), SECURITYMADEIN.LU and the Center for Cyber security Belgium (CCB).
DNSSEC (Domain Name System Security Extensions) technology authenticates DNS records using cryptographic keys to ensure that each domain fits perfectly into a trusted chain within the tree of the Internet-based naming system.