Simple definition
A mechanism that allows the authenticity of certain answers to be verified cryptographically DNS.
Technical definition
DNS Security Extensions adds digital signatures and a chain of trust to the zones DNS to detect falsified or altered responses.
What is it used for ?
Reducing the risk of receiving a response DNS handled when an area is correctly signed and validated.
Practical example
A compatible solver can check the signature DNSSEC before accepting the IP address of a domain.
Common issues
- Broken confidence chain
- Incoherent keys or SDs
- SERVFAIL after poor key rotation
Related terms
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.