DNSSEC - a good idea or not worth the time?

Gurus,

Just wondering if any of you regular contributors here may have implemented
DNSSEC and what were your thoughts on it - good idea or not worth the time?

 

Second question, does any flavor of Windows Server (2003 or 2008) DNS
support DNNSEC?

 

In

Hello SPin,

That depends. Do you have applications that require it's use? Keep in mind,
when using Windows DNS and AD Integrated Zones with Secured Updates, a
client must authenticate using Kerberos anyway. Is there a 3rd party app, or
possibly for zone transfers that requires non-Kerberos authentication or
some other security for resolution? I would imagine zone transfers are not
in question here, that is assuming you are using AD Integrated zones.
http://technet.microsoft.com/en-us/library/cc728328.aspx


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCT
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly.
Please check http://support.microsoft.com for regional support phone
numbers.