Applications

From DNSSEC-Tools Wiki

Contents 1 Priority 2 Applications 2.1 Protocols 2.2 Internet Applications 2.3 Open source tools 3 Suites (All Pri 1) 4 Policy Tools (All Pri 1) 5 Parent-child tools (All Pri 1)

Priority

• 1 = Must implement
• 2 = Implement only if we find it to be useful
• 3 = On our wish list, no immediate plans of implementing

Applications

Protocols

Pri	Piece	Creator	Status
1	Opportunistic encryption http://www.openswan.org	Story	patches in SVN, should be available in 1.3 release
2	One of {NFS, Samba} or something similar	-	-
2	ENUM/SIP	-	-
2	Radius	-	-

Internet Applications

Pri	Piece	Creator	Status
1	Firefox 1.5.x	Hardaker	final tweaks
1	Jabberd 2.0	Story	final tweaks
1	Sendmail MTA	Abhijit	done
1	Postfix MTA	Mike	almost done
1	libspf2 and SPFMilter	Abhijit	done
1	Gaim/libgaim	-	-
1	Thunderbird Email client	-	-
2	RSS Reader	-	-
2	SPAM BL fetching	-	-
2	Wireshark (looking for validation errors/stealth mode operation)	-	-

Open source tools

Pri	Piece	Creator	Status
1	SSH	Story	final tweaks
1	wget	Baer	implemented and patch will be in DT 1.2
1	lftp	Story	bailed when cvs branch lftp-3-4-7 failed to configure/build on FC5 (note to self: try to build original code before wasting time developing patch)
1	ncftp	Story	implemented and patch will be in DT 1.2
1	proftpd	Story	implemented and patch will be in DT 1.2; Note: vsftpd (included in RHEL) does practically nothing with DNS names.
1	rsync	-	-
1	KDE	-	-
2	dump/restore	-	-
2	cvs/svn	-	-
2	curl	-	-
3	Other FTP Clients: ftp, gftp, lftp	-	-

Suites (All Pri 1)

• Possibly different suites ... each tailored to a class of zone operators. Each suite will wrap around
  • Editors (for zone files)
  • Wizard
    • Upload Zone
    • Sign
    • Test
    • Master / Slave
  • Key Rollover
  • Docs
  • Parent Upload
  • Policy
  • Resolver Config

• Web interfaces for managing DNSSEC operations
  • Hosting interfaces (one or more of)
    • CPanel ? (commercial)
    • Plesk ? (commercial)
    • ISPConfig (open source)
  • webmin
  • misc
    • DNS Control (2005)
    • Maintain (2006; from Oregon State University's Open Source Lab )
    • ProBIND2 (2004)
    • Carnegie Mellon NetReg (enterprise scale)
    • Sauron (2004)
    • DNS Admin (2003)
    • NIC Tool (2004)
    • DNS Dusty (2004)
    • CDNSMan (2004)

Policy Tools (All Pri 1)

• Manage DNSSEC-related policies: resolver-level

Pri	Piece	Creator	Status
1	LD_PRELOAD	-	-

• Manage DNSSEC-related policies: enterprise-level

• last-hop?

• Trust Anchor Configuration
  • link to libsres/ libval?
  • configuration
  • rollover client management

Parent-child tools (All Pri 1)

• Support for different types of parent zones