DANE: The Future of Transport Layer Security (TLS)

Session description:

If you connect to a “secure” server using TLS/SSL (such as a web server, email server or xmpp server), how do you know you are using the correct certificate? With DNSSEC now being deployed, a new protocol has emerged called “DANE” (“DNS-Based Authentication of Named Entities“), which allows you to securely specify exactly which TLS/SSL certificate an application should use to connect to your site. DANE has great potential to make the Internet much more secure by marrying the strong integrity protection of DNSSEC with the confidentiality of SSL/TLS certificates. In this session, we will explain how DANE works and how you can use it to secure your websites, email, XMPP, VoIP, and other web services.

Target audience:

Network engineers, IT managers, ISPs, CTOs and CIOs

Presented by:

Michuki Mwangi - Senior Development Manager for Africa: Internet Society

Prerequisites:

None