KINDNS: Promoting DNS Security Best Practices#

Champika Wijayatunga (ICANN)

• Why: Security-hygiene framework for DNS operators of all sizes; useful as a checklist and as a signal of what the DNS ecosystem considers baseline defenses. Lightweight on novelty but practical for anyone running authoritative or recursive infrastructure.
• What: ICANN's KINDNS framework — a curated set of simple, straightforward operational security measures that DNS operators of any size can implement, aimed at closing the patchwork of uneven security levels across the DNS ecosystem that attackers exploit. (from abstract only)
• How: Norm-setting via a published best-practice framework: identify the highest-impact security measures (the ones smaller operators struggle to track and larger operators selectively skip) and package them for adoption.
• Where applicable: Broadly applicable to any DNS operator; not a technical innovation but a gap-closing checklist.