Building an Infrastructure for DNSSECbis in Mexico

This paper describes the architecture developed for DNSSECbis implementation in NIC Mexico. The main goal of this work is to create a secure domain. We propose to build an architecture to manage DNSSECbis private keys securely. The software tools developed allows a zone administrator and the Internet Community¹ to deploy DNSSECbis quickly and efficiently. One such tool checks whether a secure domain is correctly configured. Additional tools to manage private and public keys for DNSSECbis were created. The proposed architecture and tools have been used for DNSSECbis deployment under test.mx. The results of this trial shows that DNSSECbis adoption is feasible.