Africa opts for slow DNSSEC adoption

10.01.2010

Many African countries have chosen to train registry managers first before implementing changes to their infrastructure. In other countries, they have problems running the registry, let alone the DNSSEC.

"With any critical infrastructure it's important to be careful, which is why the root is being signed in such a measured and controlled fashion; it is true that there is concern over some aspects, like the increased size of DNS responses from root servers, and there is measurement and analysis work going on now to help clarify how much of a problem that is," said John Crain, Senior Director in charge of security, stability and resiliency.

"During ICANN and Africa TLD organization meetings in March, there will be training for African ccTLD registry managers on DNSSEC," said Joe Kiragu, administrative manager at Kenic, the .ke registry.

Some of the countries that have adopted DNSSEC offer it as a value added service for companies that need additional security such as online financial services and other e-commerce platforms.

Experts in Africa argue that it would be easier for African registries to adopt DNSSEC given most registries have few domains compared to registries in the west that have millions of domains.