The first phase of the Domain Name System Security Extension (DNSSec) for Finnish domain names in use

FICORA will introduce the Domain Name System Security Extension (DNSSec) for Finnish domain names in two phases. The first phase, signing the .fi root, began on 18 August.

Later in the autumn the second phase of the security extension will be brought into use as the actual production keys are used in the signing and the public keys are published in the .fi root. The security extension will be fully available for customers to use on 31 March 2011. No measures are required from fi-domain name holders since service providers maintaining the name servers and network operators are responsible for the introduction of the security extension.

About DNSSec

DNSSec (Domain Name System Security Extensions) is an extension to the domain name system, with the purpose of improving the information security of the name service. The name service can be compared to a telephone directory that covers the entire world, and every domain name (for instance www.dnssec.fi) in this directory has been given a unique IP address (for example 87.239.124.120) of its own.

When DNSSec is in use, responses to name service queries are digitally signed. DNSSEC guarantees the integrity and origin of information since it ensures that responses to name service queries come from the correct sender and that the response information has not been modified.

A key pair, consisting of a public key and a private key, is needed in order to create a digital signature. The private key is kept secret and the holder alone has access to it whereas the public key is published in its own record in the name service. The digital signature can be verified by using the public key corresponding with the private key.

Further information:

Juhani Juselius, Head of Domain Names, tel. +358 9 6966 743 or 358 40 730 6776
Sami Salmensuo, Development Manager, tel. +358 9 6966 762 or 358 40 730 2808]