CDS Status Check - Sicherheit - NIC Liechtenstein

<!DOCTYPE html> <html lang="de"> <head> <title>CDS Status Check - Sicherheit - NIC Liechtenstein</title> <link rel="stylesheet" type="text/css" href="/export/system/modules/ch.SWITCH.ocms.www/resources/css/slim.css" /> <link rel="stylesheet" type="text/css" href="/export/system/modules/ch.SWITCH.ocms.subsite/resources/css/sub.css" /><link rel="stylesheet" type="text/css" media="all" href="/export/sites/nicli/styles.css" /> <script src="/export/system/modules/ch.SWITCH.ocms.subsite/resources/js-slim/sub-slim.js" type="text/javascript" ></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta charset="UTF-8"> <link rel="shortcut icon" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/favicon.ico" type="image/x-icon" /> <link rel="apple-touch-icon" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon.png" /> <link rel="apple-touch-icon" sizes="57x57" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-57x57.png" /> <link rel="apple-touch-icon" sizes="72x72" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-72x72.png" /> <link rel="apple-touch-icon" sizes="76x76" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-76x76.png" /> <link rel="apple-touch-icon" sizes="114x114" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-114x114.png" /> <link rel="apple-touch-icon" sizes="120x120" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-120x120.png" /> <link rel="apple-touch-icon" sizes="144x144" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-144x144.png" /> <link rel="apple-touch-icon" sizes="152x152" href="/export/system/modules/ch.SWITCH.ocms.www/resources/images/site_icons/apple-touch-icon-152x152.png" /> </head> <body> <div class="container"> <div class="swi-subsite-logo-container"> <a href="https://www.switch.ch/de/"><img height="46" width="180" src="/export/system/modules/ch.SWITCH.ocms.www/resources/images/logoHi.png" alt=""></a>  <ul class="nav nav-pills pull-right swi-nav-pills-app-meta hidden-xs"> <li class="dropdown"> <a href="#" class="dropdown-toggle" data-toggle="dropdown">DE <span class="swi-link-caret"></span></a> <ul class="dropdown-menu"> <li><a href="/security/cds/">EN</a></li> </ul> </li> </ul>  </div> <nav class="navbar navbar-default swi-navbar-subsite" role="navigation"> <div class="container-fluid">  <div class="navbar-header"> <button type="button" class="navbar-toggle" data-toggle="collapse" data-target="#bs-example-navbar-collapse-1"> <span class="sr-only">Toggle navigation</span> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="navbar-brand" href="/de/">NIC Liechtenstein</a> </div>  <div class="collapse navbar-collapse" id="bs-example-navbar-collapse-1"> <ul class="nav navbar-nav"> <li class=" "> <a href="/de/whois/">Abfrage</a> </li> <li class=" "> <a href="/de/registrars/">Registrare</a> </li> <li class=" "> <a href="/de/terms/">Rechtliches</a> </li> <li class="active "> <a href="/de/security/">Sicherheit</a> </li> <li class=" "> <a href="/de/support/">Support</a> </li> <li class=" "> <a href="/de/statistics/">Statistiken</a> </li> <li class=" "> <a href="/de/about/">脺ber uns</a> </li> <li class="dropdown visible-xs"> <a href="#" class="dropdown-toggle" data-toggle="dropdown">DE <span class="swi-link-caret"></span></a> <ul class="dropdown-menu"> <li><a href="/security/cds/">EN</a></li> </ul> </li> </ul> </div> </div> </nav> </div> <div id="jumbotron" > <div>  <div class="jumbotron swi-jumbotron swi-jumbotron-bright-text swi-jumbotron-www swi-jumbotron-noimg"> <div class="container swi-jumbotron-content"> <div class="swi-inner"> <h1 >CDS Status Check</h1> </div> </div> </div></div> </div> <div class="container swi-container"> <div class="row"> <div class="col-xs-12 col-sm-8"> <div class="swi-tree visible-xs"> <ul> <li><a href="/de/security/">Sicherheit</a></li> <li><a href="/de/security/malware/">Sichere Websites</a></li> <li><a href="/de/security/resilience/">DNS-Resilienzprogramm</a></li> <li><a href="/de/security/dnssec/">DNSSEC</a> <ul> <li><a href="/de/security/dnssec/details/">DNSSEC im Detail</a></li> </ul></li> <li class="active"><a href="/de/security/cds/">CDS Status Check</a></li> <li><a href="/de/security/dns_health/">DNS Health Report</a></li> <li><a href="/de/security/lock/">Registry Lock</a> </li> </ul> </div> <div id="content" ><div> <div class="bs-callout bs-callout-info bs-callout-nobottom"> <h2>Status of CDS Publication</h2><p>Enter a .ch or .li domain name here to check whether the DNSSEC related changes signaled via CDS are valid and will be published.</p> <form method="post" class="form-horizontal" role="form" action="/de/security/cds/"> <div class="form-group"> <div class="col-xs-12 col-sm-8 col-lg-10"> <input type="text" class="form-control" name="domain" id="domain" value=""> <input type="hidden" name="language" value="de" /> </div> <div class="col-xs-2 inverse-tooltip" id="submitRequestWrapper" data-toggle="tooltip" data-title="Bitte geben Sie einen zul盲ssigen Domain-Namen mit mindestens 2 Zeichen ein."> <button type="submit" id="submitRequest" disabled class="whois-form-btn btn btn-default">check</button> </div> </div> </form> </div> </div> <div> <div ><h3>Automated DNSSEC Provisioning</h3> <p>With a CDS (Child DS) record, a name server operator can signal to the registry which DS record should be set for a domain name in the .ch or .li zone. Our system checks all registered .ch and .li domain names for the presence of CDS records on a daily basis. This process allows for fully automated DNSSEC bootstrapping, key rollover or removal. To take advantage of this process your DNS software needs to support the publication of CDS records.</p> <p>Changes to the DS record set signaled via CDS records are accepted and published in the .ch or .li zone only if these acceptance criteria are met:</p> <ul class="cdsInfo"> <li>The current CDS record set can be validated.</li> <li>The new DS RRSET does not break the chain of trust.</li> <li>The CDS record set is signed with a key that is represented in both the current DNSKEY and DS record set.</li> </ul> <p>For bootstrapping DNSSEC, the following additional requirements apply:</p> <ul class="cdsInfo"> <li>A published CDS record set must not change for three consecutive days.</li> <li>A published CDS record set must not change for at least three verification runs. </li> <li>If the CDS records are authenticated according to <a href="https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-bootstrapping/">https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-bootstrapping</a>, the bootstrapping delay is removed and DS records will be activated immediately after the first verification run if all other checks pass.</li> <li>All authoritative name servers assigned to a domain name in our database are checked on all their IP addresses. These name servers must respond with a consistent result.</li> <li>The DNS query is sent over TCP only.</li> </ul> <p>Read <a href="/export/shared/.content/files/SWITCH_CDS_Manual_en.pdf">our guidelines</a> for a more detailed description of our provisioning process.</p></div></div> </div> </div> <div class="col-xs-12 col-sm-4 swi-subsite-sidebar"> <div class="swi-tree hidden-xs"> <ul> <li><a href="/de/security/">Sicherheit</a></li> <li><a href="/de/security/malware/">Sichere Websites</a></li> <li><a href="/de/security/resilience/">DNS-Resilienzprogramm</a></li> <li><a href="/de/security/dnssec/">DNSSEC</a> <ul> <li><a href="/de/security/dnssec/details/">DNSSEC im Detail</a></li> </ul></li> <li class="active"><a href="/de/security/cds/">CDS Status Check</a></li> <li><a href="/de/security/dns_health/">DNS Health Report</a></li> <li><a href="/de/security/lock/">Registry Lock</a> </li> </ul> </div> <div id="context" ></div> </div> </div> </div> <footer class="swi-footer-bottom swi-footer-bottom-subsite hidden-print"> <div class="container clearfix"> <div class="swi-footer-breadcrumb pull-left"> <ol class="breadcrumb"> <li><a href="/de/about/disclaimer/">Rechtliches</a></li> <li><a href="/de/about/imprint/">Impressum</a></li> </ol> </div> <div class="swi-footer-copyright-subsite pull-right"> © 2025 f眉r Inhalte bei Switch </div> </div> </footer>  <script type="text/javascript"> var _paq = _paq || []; _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u=(("https:" == document.location.protocol) ? "https" : "http") + "://www.switch.ch/tracker/"; _paq.push(['setTrackerUrl', u+'piwik.php']); _paq.push(['setSiteId', 9]); var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.type='text/javascript'; g.defer=true; g.async=true; g.src=u+'piwik.js'; s.parentNode.insertBefore(g,s); })(); </script> <noscript><p><img src="https://www.switch.ch/tracker/piwik.php?idsite=9" style="border:0;" alt="" /></p></noscript>  </body> </html>

CINXE.COM

CDS Status Check - Sicherheit - NIC Liechtenstein