DNSSEC (Domain Name System Security Extensions)
What is DNSSEC and why does it matter for tokenized and traditional domains?
- glossary
原始语言: English
DNSSEC (Domain Name System Security Extensions) is a set of cryptographic extensions to the DNS protocol that lets resolvers verify the authenticity and integrity of DNS responses. Without DNSSEC, an attacker can forge or tamper with DNS replies on the path between resolver and authoritative server, redirecting users to malicious infrastructure. With DNSSEC, the records are signed, and a chain of trust runs from the DNS root down through each zone via DS records. DNSSEC is specified in RFC 4033 and related RFCs. Tokenizing a domain doesn't change DNSSEC at all — the chain of trust still runs through the registrar and registry, and DS records are published the same way. Many DNS providers (Cloudflare, Route53) sign zones automatically when DNSSEC is enabled.
相关关键词
- DNSSEC
- DNS security
- domain security
- DS record
- chain of trust
- cryptographic DNS