DNSSEC with Route 53: Protecting the core of the Internet

Andreas Wittig – 22 Mar 2021

The Internet relies on DNS. This makes it all the more important to do everything possible to protect the global DNS infrastructure from attacks. Andreas explains how DNSSEC protects from DNS spoofing. During the demo you will learn how to enable DNSSEC for your domains by using Route 53.

DNSSEC with Route 53: Protecting the core of the Internet

What you will learn by watching the video and following the demo?

  • Protect from DNS spoofing!
  • What is DNSSEC?
  • How to enable DNSSEC with Route 53?
  • Pros and Cons of DNSSEC

Enjoy the video!

Already a cloudonaut plus subscriber? Watch the full video and join the discussion.

Why is DNSSEC important? Because, DNSSEC protects from the following attach, called DNS spoofing.

  1. Attacker injects DNS records into DNS server/resolver.
  2. User resolves domain name, DNS server responds with “wrong” IP address.
  3. User sends requests to “wrong” server.
  4. Attacker steals password, reads sensitive information, …

DNS Spoofing

By the way, cloudonaut.io is protected by DNSSEC already.

Andreas Wittig

Andreas Wittig

I'm an independent consultant, technical writer, and programming founder. All these activities have to do with AWS. I'm writing this blog and all other projects together with my brother Michael.

In 2009, we joined the same company as software developers. Three years later, we were looking for a way to deploy our software—an online banking platform—in an agile way. We got excited about the possibilities in the cloud and the DevOps movement. It’s no wonder we ended up migrating the whole infrastructure of Tullius Walden Bank to AWS. This was a first in the finance industry, at least in Germany! Since 2015, we have accelerated the cloud journeys of startups, mid-sized companies, and enterprises. We have penned books like Amazon Web Services in Action and Rapid Docker on AWS, we regularly update our blog, and we are contributing to the Open Source community. Besides running a 2-headed consultancy, we are entrepreneurs building Software-as-a-Service products.

We are available for projects.

You can contact me via Email, Twitter, and LinkedIn.

Briefcase icon
Hire me