Joel Purra: Developer and more


node-dnssec-name-shame

dnssec-name-and-shame.com

Look at a domain and check for DNSSEC records. Naming and shaming included!

Initially developed during The Next Web’s Kings of Code Hack Battle 2014 in Amsterdam, The Netherlands.

Requirements

Getting started

  • Make sure getdns is installed properly, including unbound’s root anchor. If the root anchor isn’t set up properly, all DNS lookups will be labeled insecure.
  • Make sure mongodb is running.
# Clone the repository
git clone --recursive https://github.com/joelpurra/node-dnssec-name-shame.git node-dnssec-name-shame
cd node-dnssec-name-shame

# Install dependencies
npm install
bower install

# Start the server
npm start

# Optionally start the server in debugging mode
npm run debug

Notes

  • This implementation only checks a domain for signed A, AAAA, CNAME, MX and SOA records. You might want to try another tool for more extensive DNSSEC tests and analysis.
  • Lookups are cached in getdns’ context for the duration of the server’s uptime. DNS record TTL should also be in effect.

Todo

☐ Fetch Alexa’s top 25 (or more) sites dynamically.
☐ Modify links to the external sites to open in new window, and add link to /name-shame/ JSON URL canceled with javascript.
☐ Create pretty-pretty slide show style animations for the listed example domains?
☑ Tweet the results.
☑ Add sounds for pass and fail.
☑ Create a small API.
☑ Download Google Fonts and serve locally: google-font-download "Quando" "Pacifico" "'Open Sans'".

Thanks

License

Copyright (c) 2014, Joel Purra and Tom Cuddy. All rights reserved.

When using node-dnssec-name-shame, comply to the GNU Affero General Public License 3.0 (AGPL-3.0). Please see the LICENSE file for details.

Background animations by hexagonif.