An Exploration of the Adoption of DNSSEC by Businesses within the Norwegian ccTLD

Abstract

The Domain Name System Security Extension  (DNSSEC) is a cryptographic extension to the  Domain Name System (DNS). The DNSSEC gives  the DNS hierarchy a chain of trust from the  root zone all the way down to the domain. By  utilising DNSSEC, the client can verify that the  DNS server’s response has not been tampered with  in transit using strong trustworthy cryptographic  algorithms. This paper presents a pilot research  into the adoption of DNSSEC in Norwegian (.NO)  ccTLD. The data set investigated in this researched  a collection of Norwegian businesses that have  a domain within the Norwegian ccTLD. This  research found out that the Norwegian ccTLD  adoption rate is amongst one of the highest  compared to other ccTLDs. The DNSKEY  resource records (RRs) collected in this research  were used to identify some potential weaknesses.  These possible weaknesses include the algorithm  used, how long validity there was on the DNSKEY,  and shared DNSKEY values across multiple  domains.

https://doi.org/10.59200/ICONIC.2022.003