DNSSEC

DNS security extensions authenticating DNS response origins with digital signatures to prevent cache poisoning.

Core Principles & Analysis

• Adds RRSIG digital signatures to standard DNS records.
• Builds a chain of trust anchored at the cryptographically signed DNS root zone.
• The DNS root zone was first signed in July 2010.

Specifications & Metrics

• PROTECTS: DNS resolution chain