com-logonet-logo
Verisign Labs

The DANE Initiative

DNS-based Authentication of Named Entities (DANE) is a suite of protocols being standardized by the IETF to enhance Internet security by allowing keys to be placed into DNS and secured by DNSSEC. Verisign Labs researchers are working with the Internet community to develop prototypes and reference implementations, advance standards, and promote awareness of DANE and its full potential to advance secure key learning.

How DANE Works

Learn how enterprises and users can use DANE to discover security keys and add strong security to their email and other online applications.

Catch up on the technologies for securing applications using DNSSEC and DANE

Publications

Shumon Huque
Next Steps in DANE Adoption. DNS-OARC Fall '15 Workshop
2015
Presentations / Panels
Eric Osterweil
A New Architecture for Secure Key Learning: DANE. US Telcom Webinar, August 6, 2015
2015
Presentations / Panels
Shumon Huque, Dan James, Viktor Dukhovni
Client Certificates in DANE TLSA Records
2015
Requests for Comments (RFC) / Internet Drafts
Melinda Shore, Richard Barnes, Shumon Huque, Willem Toorop
A DANE Record and DNSSEC Authentication Chain Extension for TLS
2015
Requests for Comments (RFC) / Internet Drafts
Duane Wessels
Recent and Future Developments in DNS Security. NANOG-on-the-Road, Herndon, VA.
2015
Presentations / Panels
Glen Wiley, Eric Osterweil, Danny McPherson
DNSSEC/DANE: Tools to Encourage Adoption. ICANN 53 DNSSEC Worskhop.
2015
Presentations / Panels
Liang Zhu, Duane Wessels, John Heideman, Allison Mankin
Measuring DANE TLSA Deployment. TMA '15
2015
Publications / Papers
Eric Osterweil, Glen Wiley, Tomofumi Okubo, Ramana Lavu, Aziz Mohaisen
Opportunistic Encryption with DANE Semantics and IPsec: IPSECA. Internet-draft, WIP
2015
Requests for Comments (RFC) / Internet Drafts
Glen Wiley, Eric Osterweil, David Smith, A. Reiner, D. Roark
Using DANE to Associate Payment Information with Email Eddresses (PMTA). Internet-draft, WIP
2015
Requests for Comments (RFC) / Internet Drafts
Burt Kaliski
Living in a World of Decentralized Data (Keynote). NDSS SENT '15
2015
Presentations / Panels
Duane Wessels, Casey Deccio
Removing Obstacles to DNSSEC Deployment. ICANN 52 DNSSSEC Workshop
2015
Presentations / Panels
Burt Kaliski
Data You Can Trust: The Key to Information Security. HP Information Security Colloquium
2014
Presentations / Panels
Eric Osterweil, Danny McPherson, Lixia Zhang
The Shape and Size of Threats: Defining a Networked System's Attack Surface. NPSec '14
2014
Publications / Papers