{"id":624,"date":"2010-05-06T02:10:00","date_gmt":"2010-05-05T18:10:00","guid":{"rendered":"http:\/\/blog.jixin.ntxz.net\/?p=624"},"modified":"2010-07-30T15:39:12","modified_gmt":"2010-07-30T07:39:12","slug":"%e5%85%b3%e4%ba%8e%e6%ad%a4%e6%ac%a1icann%e5%a4%a7%e8%a7%84%e6%a8%a1%e9%83%a8%e7%bd%b2dnssec","status":"publish","type":"post","link":"http:\/\/www.ntxz.net\/?p=624","title":{"rendered":"\u5173\u4e8e\u6b64\u6b21ICANN\u5927\u89c4\u6a21\u90e8\u7f72DNSSEC"},"content":{"rendered":"<p>\u6839\u636eDNSPOD\u7684\u89c2\u5bdf\uff0cICANN\u5df2\u7ecf\u6210\u529f\u7684\u628aDNSSEC\u90e8\u7f72\u523013\u53f0\u6839DNS\u670d\u52a1\u5668\u4e0a\u4e86\u3002<\/p>\n<p>\u6b64\u6b21\u90e8\u7f72\u4e4b\u7d27\u5f20\uff0c\u4ee4\u4eba\u59cb\u6599\u672a\u53ca\uff0cICANN\u4e8b\u524d\u6ca1\u6709\u8db3\u591f\u7684\u901a\u77e5\uff0c\u6216\u8bb8\u80cc\u540e\u4f1a\u6709\u66f4\u52a0\u6df1\u5c42\u6b21\u7684\u539f\u56e0\u3002<\/p>\n<p>\u6839\u636e\u4e86\u89e3\uff0c2003\u5e74\u4ee5\u524d\u751f\u4ea7\u7684\u7f51\u7edc\u8bbe\u5907\uff0c\u6709\u4e0d\u5c11\u4e0d\u652f\u6301DNSSEC\uff0c\u8fd9\u610f\u5473\u7740\u5927\u91cf\u8fd0\u8425\u5546\u90fd\u9700\u8981\u5347\u7ea7\u4ed6\u4eec\u7684\u7f51\u7edc\u8bbe\u5907\u3002\u5bf9\u4e8e\u6765\u4e0d\u53ca\u5347\u7ea7\u7f51\u7edc\u8bbe\u5907\u7684\u8fd0\u8425\u5546\u6765\u8bf4\uff0c\u53ef\u80fd\u4f1a\u9020\u6210\u4ed6\u4eec\u7684\u7528\u6237\u65e0\u6cd5\u6b63\u5e38\u89e3\u6790\u4e00\u4e2a\u57df\u540d\uff0c\u751a\u81f3\u4f1a\u56e0\u4e3a\u65e0\u6cd5\u89e3\u6790\u57df\u540d\u800c\u5f15\u8d77\u4e00\u4e9b\u5c0f\u89c4\u6a21\u7684DNS\u8bf7\u6c42\u98ce\u66b4\u3002\u6240\u4ee5\u672a\u6765\u51e0\u5929\u5185\uff0c\u53ef\u80fd\u4f1a\u6709\u90e8\u5206\u5730\u533a\u7528\u6237\u6240\u7528\u7684DNS\u4e0d\u6b63\u5e38\uff0c\u4f1a\u7ecf\u5e38\u89e3\u6790\u5931\u8d25\uff0c\u751a\u81f3\u65e0\u6cd5\u89e3\u6790\u3002\u4f46\u8fd9\u60c5\u51b5\u4f1a\u968f\u7740\u8fd0\u8425\u5546\u5347\u7ea7\u4ed6\u4eec\u7684\u8bbe\u5907\u9010\u6e10\u89e3\u51b3\u3002<\/p>\n<p>DNSPOD\u4e3a\u4e86\u5e94\u5bf9\u6b64\u6b21\u4e8b\u4ef6\uff0c\u589e\u52a0\u4e86\u5bf9DNSSEC\u7684\u652f\u6301\uff0c\u4f46\u8fd9\u5e76\u4e0d\u610f\u5473\u7740\u7528\u6237\u7528DNSPOD\u5c31\u4e0d\u4f1a\u51fa\u73b0\u89e3\u6790\u5931\u8d25\u7684\u60c5\u51b5\u3002\u56e0\u4e3a\u5c31\u7b97DNSPOD\u89e3\u6790\u6b63\u5e38\uff0c\u4e5f\u6709\u53ef\u80fd\u56e0\u4e3a\u8fd0\u8425\u5546\u7684\u8bbe\u5907\u4e0d\u652f\u6301DNSSEC\u800c\u5bfc\u81f4\u89e3\u6790\u5931\u8d25\u3002\u6240\u4ee5\u95ee\u9898\u6700\u7ec8\u8fd8\u662f\u8981\u9760\u8fd0\u8425\u5546\u53bb\u89e3\u51b3\u3002<\/p>\n<p>\u6839\u636eICANN\u7684\u65f6\u95f4\u8868\uff0c\u6b64\u6b21\u5927\u89c4\u6a21\u90e8\u7f72\u4e0a\u7ebf\u7684DNSSEC\u652f\u6301\uff0c\u6240\u4f7f\u7528\u6765\u52a0\u5bc6\u7684KEY\u53ea\u662f\u7528\u6765\u6d4b\u8bd5\uff0c\u65e0\u6cd5\u4f5c\u4e3aDNSSEC\u5408\u6cd5\u6027\u9a8c\u8bc1\u7684\u7528\u9014\u3002\u4e5f\u5c31\u662f\u8bf4\uff0c\u5927\u5bb6\u90fd\u662f\u5c0f\u767d\u9f20\u3002\u6b63\u5f0f\u53ef\u4ee5\u4f7f\u7528\u6765\u52a0\u5bc6\u7684KEY\uff0c\u5c06\u4f1a\u57287\u6708\u4efd\u90e8\u7f72\u4e0a\u7ebf\u3002<\/p>\n<p>\u867d\u7136DNSSEC\u90e8\u7f72\u4e0a\u7ebf\uff0c\u4f46\u79bb\u57df\u540d\u9632\u52ab\u6301\u8fd8\u6709\u5f88\u957f\u4e00\u6bb5\u8def\u8981\u8d70\u3002\u56e0\u4e3a\u6b63\u5f0f\u7684KEY\u4e0a\u7ebf\u540e\uff0c\u9700\u8981\u57df\u540d\u62e5\u6709\u8005\u81ea\u5df1\u53bb\u751f\u6210\u5c5e\u4e8e\u81ea\u5df1\u57df\u540d\u7684KEY\uff0c\u5e76\u4e14\u53bbDNS\u670d\u52a1\u5668\u4e0a\u9762\u90e8\u7f72\uff0c\u4e00\u822c\u7684\u57df\u540d\u62e5\u6709\u8005\u662f\u73a9\u4e0d\u6765\u8fd9\u4e48\u590d\u6742\u7684\u4e1c\u897f\u7684\u3002\u4e0d\u8fc7\u672a\u6765DNSPOD\u53ef\u80fd\u4f1a\u5e2e\u5927\u5bb6\u628a\u8fd9\u4e9b\u4e8b\u60c5\u90fd\u505a\u5b8c\u3002<\/p>\n<p>\u672a\u6765DNSPOD\u5c06\u4f1a\u7ee7\u7eed\u5bf9\u6b64\u4e8b\u8fdb\u884c\u5173\u6ce8\u548c\u8ddf\u8fdb\u3002<\/p>\n<p>\u9644\uff1aICANN\u7684DNSSEC\u90e8\u7f72\u65f6\u95f4\u8868<\/p>\n<ul>\n<li>December 1, 2009: Root zone signed for internal use by VeriSign and ICANN. &nbsp;ICANN and VeriSign exercise interaction protocols for signing the ZSK with the KSK.\n<li>January, 2010: The first root server begins serving the signed root in the form of the DURZ (deliberately unvalidatable root zone). The DURZ contains unusable keys in place of the root KSK and ZSK to prevent these keys being used for validation.\n<li>Early May, 2010: All root servers are now serving the DURZ. &nbsp;The effects of the larger responses from the signed root, if any, would now be encountered.\n<li>May and June, 2010: The deployment results are studied and a final decision to deploy DNSSEC in the root zone is made.\n<li>July 1, 2010: ICANN publishes the root zone trust anchor and root operators begin to serve the signed root zone with actual keys \u2013 The signed root zone is available. <\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u6839\u636eDNSPOD\u7684\u89c2\u5bdf\uff0cICANN\u5df2\u7ecf\u6210\u529f\u7684\u628aDNSSEC\u90e8\u7f72\u523013\u53f0\u6839DNS\u670d\u52a1\u5668\u4e0a\u4e86\u3002 \u6b64\u6b21\u90e8\u7f72\u4e4b\u7d27\u5f20\uff0c\u4ee4 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,8],"tags":[],"class_list":["post-624","post","type-post","status-publish","format-standard","hentry","category-1","category-oldblog"],"views":254,"_links":{"self":[{"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/posts\/624","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=624"}],"version-history":[{"count":1,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/posts\/624\/revisions"}],"predecessor-version":[{"id":768,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/posts\/624\/revisions\/768"}],"wp:attachment":[{"href":"http:\/\/www.ntxz.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=624"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=624"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=624"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}