DANE Resources

DANE - DNSSEC for Application Security

Some DANE resources.

DANE tools ..

• gen_tlsa: Generate a DNS TLSA record
• danecheck: Test a configured DANE TLS Service
• danecheck-smtp: Test a configured DANE TLS SMTP Service
• openpgpkey: Generate a DNS OPENPGPKEY record
• DANE TLS Test Sites (hosted at huque.com)
• Go Library for DANE Authentication

IETF Technical Specifications ..

• RFC 6698: DANE and TLSA record specification
• RFC 7671: DANE Protocol: Updates and Operational Guidance
• RFC 7672: SMTP Security via opportunistic DANE TLS
• RFC 7673: Using DANE TLSA Records with SRV Records
• I-D: A DANE and DNSSEC Authentication Chain Extension for TLS
• I-D: Client Certificates in DANE TLSA Records
• I-D: TLS Extension for DANE Client Identity
• I-D: TLS sessions in SIP using DANE TLSA Records

Articles and talks ..

• Whither DANE? -- APNIC Blog; July 05 2019
• How DANE Strengthens Security for TLS, S/MIME, and Other Applications; November 20th 2015
  CircleID magazine
• Next Steps in DANE Adoption; October 3rd 2015
  DNS-OARC Fall 2015 Workshop, Montreal, Canada
• DANE and Application Uses of DNSSEC; October 29th 2014
  Internet2 Technology Exchange, Indianapolis, IN
• DNSSEC and Certificates; October 19th 2012
  Shumon Huque's blog