Africa DNSSEC Roadshow: Improving DNSSEC Deployment Across the Continent

The Africa DNSSEC Roadshow, a Coalition for Digital Africa initiative, is dedicated to enhancing the deployment of Domain Name System Security Extensions (DNSSEC) across the continent. The program seeks to support ccTLD that are not yet signed to do so by providing hands-on training and close technical assistance to the operators up to the signing of their zones. By empowering local ccTLD managers and registry operators with skills and resources necessary to implement DNSSEC, the Roadshow plays a pivotal role in strengthening Africa’s Internet infrastructure.

 

Building DNS Security in Botswana and Burkina Faso

During the 2023 fiscal year, two ccTLDs were selected for targeted assistance: Botswana (.bw) and Burkina Faso (.bf). In Botswana, the local ccTLD registry, managed by the Botswana Communications Regulatory Authority (BOCRA), received onsite training and support from the DNSSEC Roadshow team. As a result, .bw ccTLD was successfully DNSSEC signed again in May 2024, securing its zone after going unsecure for nearly two years. This milestone underscores the value of the initiative, as BOCRA’s team not only gained essential skills to maintain DNSSEC infrastructure, but also enhanced their overall registry operations.

 

In Burkina Faso, the second country of the first phase, we also made significant progress. We started the DNSSEC signing process from scratch with the ccTLD registry and recently completed the final testing phase. The Autorité de Régulation des Communications Electroniques et des Postes (ARCEP) manages the .bf ccTLD, while the Association Burkinabè des Domaines Internet (ABDI) operates the registry. In their signing model, ARCEP will oversee Key Signing Key generation and security, while ABDI will handle Zone Signing Key and keys publication in the zone. The live deployment is expected soon, marking another significant step in securing the region's Internet infrastructure.

 

Expanding the Roadshow: New Participants in 2024

Building on the experience and successes achieved in Botswana and Burkina Faso, the DNSSEC Roadshow has onboarded four additional ccTLDs in the 2024 fiscal year: Cameroon (.cm), Cape Verde (.cv), Nigeria (.ng), and Sudan (.sd). Recently, we have completed the preliminary assessments and onsite Roadshow activities with .cm and .ng, and they are currently in a transition phase, receiving technical guidance to move throughout the steps to integrate DNSSEC into their operations. The Roadshow’s engagement with Cape Verde’s registry manager, Agência Reguladora Multissectorial da Economia (ARME), is scheduled for 7–11 October 2024, while the engagement with Sudan will be conducted virtually at this stage.

 

Leveraging Expertise for Sustainable Success

Under this initiative, participating ccTLD operators receive support from consultants with extensive expertise in DNS operations and registry management. This collaborative approach not only strengthens individual ccTLDs, but also elevates the overall management standards of Africa’s domain name industry. As more ccTLDs join the initiative, the Roadshow continues to build a more secure and resilient Internet infrastructure across the continent.

Stay tuned for further updates as the Africa DNSSEC Roadshow continues its mission to bolster Internet security and support the digital growth of African nations.