What DNSSEC is. And what it isn't.

guest · Apr 24, 2019

What DNSSEC is. And what it isn't.
April 11, 2019
https://www.home.neustar/blog/What DNSSEC is. And what it isn-t.

DNS is a critical internet service, but what happens if a bad actor manages to somehow subvert the DNS answers you receive such that your device connects to some other server than the one you intended? They could now prevent you from doing what you wanted, steal your credentials or eavesdrop on what you are doing. This could lead to theft, fraud, or leakage of sensitive data.

DNSSEC (Domain Name System Security Extensions) was developed to ensure that the DNS answer you receive is exactly the answer that the domain zone owner put there; no more, no less.
Let's examine how DNSSEC works, what problems DNSSEC solves, and what problems it doesn't solve. [...]
Conclusion
DNSSEC won't solve every problem related to DNS. But it is a vital part of a defense-in-depth security strategy and for some problems, such as cache poisoning, it is the most effective defense. The usual good account hygiene of strong passwords, not re-using passwords, using a password manager and using multi-factor authentication can also help.
Click to expand...

Log in or Sign up

What DNSSEC is. And what it isn't.

guest Guest

Log in or Sign up

What DNSSEC is. And what it isn't.

guest Guest

Useful Searches