{"id":38942,"date":"2011-06-15T14:00:37","date_gmt":"2011-06-15T12:00:37","guid":{"rendered":"https:\/\/blog.wedos.cz\/?p=38942"},"modified":"2020-08-27T10:48:47","modified_gmt":"2020-08-27T08:48:47","slug":"dnssec-v-testovacim-provozu","status":"publish","type":"post","link":"https:\/\/blog.wedos.com\/cs\/dnssec-v-testovacim-provozu","title":{"rendered":"DNSSEC v testovac\u00edm provozu"},"content":{"rendered":"\n<p>U n\u00e1mi registrovan\u00fdch CZ dom\u00e9n ode dne\u0161ka nab\u00edz\u00edme technologii DNSSEC. Ostr\u00e9 spu\u0161t\u011bn\u00ed p\u0159edpokl\u00e1d\u00e1me na konci \u010dervence, ale ortodoxn\u00ed fanou\u0161ci DNSSECu si jej mohou aktivovat ji\u017e nyn\u00ed.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p>Od 15.6.2011 je mo\u017en\u00e9 si u&nbsp;<strong>CZ dom\u00e9n, u kter\u00fdch jsme registr\u00e1torem<\/strong>, aktivovat technologii DNSSEC.<\/p>\n\n\n\n<p><strong>DNSSEC<\/strong>&nbsp;je technologie vyu\u017e\u00edvaj\u00edc\u00ed elektronick\u00e9ho podpisu k ov\u011b\u0159ov\u00e1n\u00ed p\u016fvodu dat v DNS z\u00e1znamech. Zamezuje tomu, aby v\u00e1m mohl \u00fato\u010dn\u00edk podstr\u010dit fale\u0161n\u00e9 DNS z\u00e1znamy a t\u00edm v\u00e1s nap\u0159. nasm\u011brovat na podvodn\u00e9 WWW str\u00e1nky. Bli\u017e\u0161\u00ed informace nap\u0159. na&nbsp;<a href=\"http:\/\/cs.wikipedia.org\/wiki\/DNSSEC\" target=\"_blank\" rel=\"noopener\">Wikipedii<\/a>. Pokus\u00edme se o obecn\u011b t\u00e9to technologii brzy napsat v\u00edce.<\/p>\n\n\n\n<p><strong>DNSSEC nab\u00edz\u00edme v testovac\u00edm re\u017eimu<\/strong>. To znamen\u00e1, \u017ee ji nedoporu\u010dujeme aktivovat u d\u016fle\u017eit\u00fdch dom\u00e9n. Sice jsme v\u0161e d\u016fkladn\u011b otestovali, ale p\u0159esto zat\u00edm negarantujeme plnou funk\u010dnost a m\u016f\u017ee doch\u00e1zet k n\u011bjak\u00fdm zm\u011bn\u00e1m a \u00faprav\u00e1m. B\u011bhem tohoto obdob\u00ed provedeme n\u011bkolik pokusn\u00fdch v\u00fdm\u011bn kl\u00ed\u010d\u016f (ZSK i KSK), abychom si ov\u011b\u0159ili, \u017ee v\u0161e bude fungovat korektn\u011b a nedojde k \u017e\u00e1dn\u00e9mu probl\u00e9mu.<\/p>\n\n\n\n<p>Nasazen\u00ed DNSSEC do ostr\u00e9ho provozu p\u0159edpokl\u00e1d\u00e1me v druh\u00e9 polovin\u011b \u010dervence.<\/p>\n\n\n\n<p>DNSSEC nab\u00edz\u00edme prozat\u00edm pouze u CZ dom\u00e9n a pouze u takov\u00fdch, u kter\u00fdch jsme registr\u00e1torem. Pozd\u011bji nab\u00eddneme DNSSEC tak\u00e9 u dom\u00e9n EU a gTLD (nejd\u0159\u00edve v srpnu).<\/p>\n\n\n\n<p>Pou\u017e\u00edv\u00e1n\u00ed DNSSEC a ve\u0161ker\u00e9 zm\u011bny jeho nastaven\u00ed jsou a budou&nbsp;<strong>zcela bezplatn\u00e9<\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Pou\u017eit\u00ed DNSSEC<\/h2>\n\n\n\n<p>Nab\u00edz\u00edme 3 mo\u017enosti nastaven\u00ed DNSSEC:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li><strong>Nepou\u017e\u00edvat DNSSEC<\/strong>&nbsp;&#8211; v\u00fdchoz\u00ed volba, dom\u00e9na nen\u00ed chr\u00e1n\u011bna technologi\u00ed DNSSEC.<br>&nbsp;<\/li><li><strong>Pou\u017e\u00edt DNSSEC WEDOS<\/strong>&nbsp;&#8211; lze pou\u017e\u00edt pouze u dom\u00e9n, kter\u00e9 vyu\u017e\u00edvaj\u00ed na\u0161e DNS servery. V takov\u00e9m p\u0159\u00edpad\u011b se aktivuje DNSSEC, DNS z\u00e1znamy se podep\u00ed\u0161\u00ed na\u0161imi kl\u00ed\u010di a u dom\u00e9ny se nastav\u00ed n\u00e1\u0161 KEYSET. My se tak\u00e9 star\u00e1me o p\u0159\u00edslu\u0161n\u00e9 obm\u011bny kl\u00ed\u010d\u016f. Z\u00e1kazn\u00edk se nemus\u00ed starat o nic.<br>&nbsp;<\/li><li><strong>Pou\u017e\u00edt vlastn\u00ed KEYSET<\/strong>&nbsp;&#8211; lze pou\u017e\u00edt pouze u dom\u00e9n, kter\u00e9 NEpou\u017e\u00edvaj\u00ed na\u0161e DNS servery. Zde si m\u016f\u017ee z\u00e1kazn\u00edk u dom\u00e9ny nastavit libovoln\u00fd KEYSET, ale o podeps\u00e1n\u00ed DNS z\u00e1znam\u016f se mus\u00ed na DNS serverech postarat s\u00e1m.<\/li><\/ol>\n\n\n\n<p>Na\u0161i z\u00e1kazn\u00edci si tedy mohou ji\u017e nyn\u00ed aktivovat DNSSEC u sv\u00fdch CZ dom\u00e9n v z\u00e1kaznick\u00e9 administraci. V\u00edce informac\u00ed ve znalostn\u00ed b\u00e1zi:&nbsp;<a href=\"https:\/\/kb.wedos.com\/cs\/nastaveni-dnssec-u-domeny\/\" target=\"_blank\" rel=\"noopener\">Nastaven\u00ed DNSSEC u dom\u00e9ny<\/a>.<\/p>\n\n\n\n<p>Zda v budoucnu aktivujeme DNSSEC automaticky u v\u0161ech dom\u00e9n na\u0161ich z\u00e1kazn\u00edk\u016f, o tom se zat\u00edm nerozhodlo. Nicm\u00e9n\u011b se sp\u00ed\u0161e p\u0159ikl\u00e1n\u00edme k tomu, \u017ee to d\u011blat nebudeme.<\/p>\n\n\n\n<p>Samoz\u0159ejm\u011b r\u00e1di uv\u00edt\u00e1me ve\u0161ker\u00e9 va\u0161e p\u0159ipom\u00ednky a poznatky.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">DNSSEC v akci<\/h2>\n\n\n\n<p>Pro kontrolu nastaven\u00ed a spr\u00e1vn\u00e9 funk\u010dnosti DNSSEC u dom\u00e9ny doporu\u010dujeme n\u00e1sleduj\u00edc\u00ed n\u00e1stroje:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"http:\/\/labs.nic.cz\/dnssec-validator\/\" target=\"_blank\" rel=\"noopener\">DNSSEC Valid\u00e1tor<\/a>&nbsp;&#8211; plugin do prohl\u00ed\u017ee\u010de Firefox, vyv\u00edjen\u00fd \u010deskou organizac\u00ed CZ.NIC<\/li><li><a href=\"http:\/\/dnsviz.net\/\" target=\"_blank\" rel=\"noopener\">DNS visualization tool<\/a>&nbsp;&#8211; n\u00e1stroj pro anal\u00fdzu a grafick\u00e9 zn\u00e1zorn\u011bn\u00ed DNS z\u00e1znam\u016f a DNSSEC kl\u00ed\u010d\u016f a jejich stavu<\/li><\/ul>\n\n\n\n<p>Prohl\u00e9dnout a zkontrolovat si to m\u016f\u017eete nap\u0159. na na\u0161\u00ed testovac\u00ed dom\u00e9n\u011b&nbsp;<strong>nasweb.cz<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>U n\u00e1mi registrovan\u00fdch CZ dom\u00e9n ode dne\u0161ka nab\u00edz\u00edme technologii DNSSEC. Ostr\u00e9 spu\u0161t\u011bn\u00ed p\u0159edpokl\u00e1d\u00e1me na konci \u010dervence, ale ortodoxn\u00ed fanou\u0161ci DNSSECu si jej mohou aktivovat ji\u017e nyn\u00ed.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,112,4],"tags":[],"class_list":["post-38942","post","type-post","status-publish","format-standard","hentry","category-spolecnost","category-bezpecnost","category-domeny"],"_links":{"self":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts\/38942","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/comments?post=38942"}],"version-history":[{"count":3,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts\/38942\/revisions"}],"predecessor-version":[{"id":39835,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts\/38942\/revisions\/39835"}],"wp:attachment":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/media?parent=38942"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/categories?post=38942"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/tags?post=38942"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}