DNSSEC for Software Developers

Registrars, ISPs, end users, and other participants in the Internet ecosystem increasingly need applications that support a DNSSEC-enabled environment.

Collectively, these entities represent a significant market opportunity for software developers that move quickly to address this need. They also underscore the vital role that open source and commercial software developers play in the broadly successful deployment and adoption of DNSSEC.

An increasing number of DNSSEC software tools are already being developed and released. For example, BIND, the most popular DNS name server, supports DNSSEC.

Strategic planning, development, and manufacturing cycles can take months or even years. Software vendors need to make ample time to plan, develop, test, and refine their products.

You can reinforce your reputation for leadership and innovation in Internet security, differentiate yourself from competitors, and get a foothold in the market for software that supports DNSSEC. You may also be able to influence the development of technical standards that support and benefit your business.

Benefits for Proactive Software Developers

By moving quickly to support the success of DNSSEC globally, you can:

• Introduce upgrades and new products that are compatible with DNSSEC.
• Help build your brand and reputation.
• Maintain customers' trust and loyalty.
• Increase Internet security for customers.
• Attract and retain security-focused customers.
• Protect your core business by enhancing trust in the Internet.
• Exert leadership and influence to shape the future of DNSSEC.

The software products that run the DNS, as well as end-user applications, such as browsers and email, are integral to the Internet's effective, innovative use. Registrars, ISPs, and end users need solutions that incorporate DNSSEC capabilities into this software. By creating DNSSEC-aware products and developing tools to simplify DNSSEC management, you help drive adoption of DNSSEC globally.

Opportunities to create customer value exist at the DNS server operating system, client operating system, and end-user application levels. For example, registrars, ISPs, and web hosting services need solutions to simplify DNSSEC zone signing and key management. They also need a way to indicate DNSSEC validation to end users, perhaps by displaying a visual cue on web browsers.

Your development of DNSSEC tools and products is critical to the success of DNSSEC. Consider the following steps to get started.

Evaluate and Plan

• Review your existing products to understand their potential for DNSSEC-related upgrades.
• Understand how DNSSEC fits into your product development strategy.
• Establish a roadmap for developing products, upgrades, and enhancements that support DNSSEC.

Test

Test the compatibility of your software with DNSSEC behavior.

Explore and Educate

• Understand the benefits and challenges that your customers experience when they implement or use DNSSEC.
• Plan strategies to inform customers about the DNSSEC features of your products.
• Ensure that your IT and customer support staff receive training to handle DNSSEC-related issues.
• Work with industry consortiums, standards bodies, and other software and hardware vendors to help develop solutions and approaches that meet the needs of your organization.