ICANN recently released a paper talking about their initiatives towards operational readiness for DNSSEC root signing. This is great reading material for any TLD operator who intends sign their DNS and this also gives a bird a eye view over the whole DNSSEC issue.

It talks about what DNSSEC is all about without being too technical and numerous issues that will be faced during deployment.

There is also a DNSSEC survey results among ccTLD registries. Although quite a large number of ccTLD registry haven’t deployed DNSSEC yet but they’re either planning deploy it in the future or waiting for DNSSEC to be matured which could easily means, they’re waiting for the root zone to be sign first.

Here are some other useful reading materials regarding DNSSEC,

• DNSSEC
• DNSSEC (wiki)

I agree there is a lot of more work to be done but will you allow such vulnerability exist?

ps : We will be responsible for deploying DNSSEC for SgNIC. So stay tune, we’ll share our experience with you