Domain Name System Security Extensions (DNSSEC)

Domain Name System Security Extensions (DNSSEC) is a suite of extensions that add a layer of security to the DNS lookup process. It provides Authentication and Integrity by digitally signing DNS records using public-key cryptography.

Standard DNS was not designed with security in mind, making it vulnerable to “DNS Spoofing” or “Cache Poisoning,” where an attacker redirects users to a malicious IP address. DNSSEC ensures that the response received by a browser is identical to the record set by the domain owner. It creates a “Chain of Trust” from the Root Zone down to the individual domain.