Home / Blogs

DNSSEC Maintenance - Just Like Mowing the Lawn

DNSSEC is a hot topic. It’s a technology newly unleashed on popular networking, which has led to countless articles and posts on the subject, including right here on CircleID.

The way a lot of articles try to get your attention is to talk about a technology, like DNSSEC, in a way that makes the technology either seem really significant or really complicated. That is why a lot of articles about DNSSEC make it sound like something huge, complicated, and scary.

But it’s not.

DNSSEC may sound difficult to understand when you read about it. However, DNSSEC is actually pretty mundane, routine, and cyclic. It just requires some actions to be performed on a regular basis, such as periodic key rolling and zone signing.

Here is the key. Try to think about DNSSEC maintenance like you would lawn maintenance. While it would be nice to just sit on your porch and just watch the grass continue to grow—pulling out the mower, checking the oil, mowing, cleaning and storing the mower is a necessary evil every now and again.

Then again, sometimes it is just easier to call in the landscapers—especially if your lawn is large or otherwise complicated. Like lawn care, DNSSEC can also be easily outsourced. While lawn care services may use the same mowers from lawn to lawn, you will ultimately save in the maintenance of the mower.

The point is, DNSSEC should not be feared. So long as you are aware of what it does, you shouldn’t be afraid to deploy it. And of course, if you still don’t want to do it, there is always the option of outsourcing.

By Edward Lewis, Director and Member of the Technical Staff at Neustar

Filed Under


Comment Title:

  Notify me of follow-up comments

We encourage you to post comments and engage in discussions that advance this post through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can report it using the link at the end of each comment. Views expressed in the comments do not represent those of CircleID. For more information on our comment policy, see Codes of Conduct.

CircleID Newsletter The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

Co-designer of the TCP/IP Protocols & the Architecture of the Internet



Threat Intelligence

Sponsored byWhoisXML API

New TLDs

Sponsored byRadix


Sponsored byDNIB.com

IPv4 Markets

Sponsored byIPv4.Global

Domain Names

Sponsored byVerisign

Brand Protection

Sponsored byCSC


Sponsored byVerisign