New tool to make child's play of DNSSEC signatures

[J65nko]

From http://www.h-online.com/security/new...s-1137346.html

Security expert Dan Kaminsky has announced Phreebird, an easy-to-use tool set for creating digital signatures based on the DNS Security Extensions (DNSSEC). Talking to The H's associates at heise Security, Kaminsky said: "For domain administrators, Phreebird drastically simplifies the use of DNSSEC." Apparently, admins don't need to worry about configurations and can simply "enable DNSSEC, and all their zones are signed in an instant." The tool reportedly also allows ISPs to sign all their customers' domains in one go.

[Carpetsmoker]

Good news, I think a large reason for DNSSEC's slow adaptation is that it's fairly time-consuming to use.

If it can be made easier with no or little loss of security, then Kaminsky has done the world of DNS yet another favor.