← Back to glossary
🧭

DNSSEC

Networking

TLS (Transport Layer Security) Man‑in‑the‑Middle (MITM) Attack DNS (Domain Name System) Secure Connection

DNS Security Extensions adding cryptographic signatures to DNS records for authenticity verification.

Definition

DNSSEC signs DNS records so resolvers can validate authenticity and integrity. It helps prevent cache poisoning and certain redirection attacks, but requires correct key management and deployment.

In plain English DNS Security Extensions adding cryptographic signatures to DNS records for authenticity verification.

Why this matters

Why it matters: Safer name resolution reduces exposure to phishing and interception.

Example

Example: A domain publishes DNSSEC (DS records in parent zone) and resolvers validate signatures on DNS responses.