Dns Glossary
Browse 30 dns terms defined in plain English, from the cultural dictionary of computing.
30 Dns Terms
- CoreDNS
- A flexible DNS server widely used in cloud-native environments, especially as Kubernetes' cluster DNS service.
- DANE
- DANE is a DNSSEC-backed mechanism that binds TLS certificates or public keys to DNS records for a domain. Security teams use it to enforce trust, reduce...
- DGA
- Short for domain generation algorithm, a technique malware uses to generate many pseudo-random domain names so operators and infected hosts can rendezvous...
- DKIM
- DKIM is a mail authentication standard that lets receiving systems verify a signed domain-level message header. Security teams use it to enforce trust, reduce...
- DNS Cache Poisoning
- DNS Cache Poisoning is an attack technique in which an adversary inserts forged DNS answers into a resolver cache so victims are directed to...
- DNS Exfiltration
- DNS Exfiltration is an attack technique in which an adversary encodes stolen data into DNS queries or responses to bypass normal egress paths. Defenders...
- DNS Firewall
- DNS Firewall is a DNS control that blocks or rewrites lookups for malicious, unauthorized, or policy-violating domains. Security teams use it to enforce trust,...
- DNS over HTTPS
- DNS over HTTPS is a method of transporting DNS queries over HTTPS to improve privacy and resist straightforward interception. Security teams use it to enforce...
- DNS over TLS
- DNS over TLS is a protocol for sending DNS queries over TLS so intermediaries cannot easily read or modify them. Security teams use it to enforce trust, reduce...
- DNS Propagation
- The time it takes for DNS changes to spread across all recursive resolvers worldwide. Controlled by the TTL (Time to Live) of the record -- resolvers cache...
- DNS Rebinding
- DNS Rebinding is an attack technique in which an adversary abuses browser trust in DNS answers to pivot from a public origin to internal services. Defenders...
- DNS Record Types
- The different types of entries in the Domain Name System: A (IPv4 address), AAAA (IPv6), CNAME (alias to another domain), MX (mail server), TXT (text data --...
- DNS resolver
- A server that translates human-readable domain names into IP addresses by recursively querying the DNS hierarchy. When you type a URL, your resolver (often...
- DNSSEC
- Short for Domain Name System Security Extensions, a set of DNS protocol additions that let resolvers verify that DNS data was signed by the correct zone and...
- DNS Sinkhole
- DNS Sinkhole is a defensive DNS response that redirects malicious domain requests to controlled infrastructure for blocking or observation. Security teams use...
- DNS Spoofing
- DNS Spoofing is an attack technique in which an adversary returns forged name-resolution answers so traffic is redirected or observed. Defenders analyze it to...
- DNS Tunneling
- DNS Tunneling is an attack technique in which an adversary encapsulates command traffic or data inside DNS records and lookups. Defenders analyze it to...
- DoH
- Short for DNS over HTTPS, a protocol that sends DNS queries through encrypted HTTPS connections instead of traditional plaintext DNS. It improves privacy and...
- Domain Generation Algorithm
- Domain Generation Algorithm is a malware routine that creates many candidate domain names so operators can regain command channels dynamically. Security teams...
- Domain Hijacking
- Domain Hijacking is the unauthorized takeover of domain registration, DNS management, or delegation control for a domain. Security teams use it to enforce...
- DoT
- Short for DNS over TLS, a protocol that encrypts DNS traffic inside a dedicated TLS session instead of sending queries in plaintext. Compared with DoH, DoT...
- Dynamic DNS Abuse
- The malicious use of dynamic DNS services to keep domain names pointed at changing IP addresses, often for phishing, malware command and control, or rapid...
- Encrypted DNS
- DNS resolution sent over encrypted protocols such as DoH or DoT so intermediaries cannot easily read or tamper with queries in plaintext. It improves privacy...
- Mail Exchange Security
- The protection of the infrastructure and configuration involved in routing email between domains, including MX records, mail gateways, TLS settings,...
- Passive DNS
- A historical record of observed DNS resolutions collected from sensors or providers, used to investigate how domains have mapped to IPs over time. Passive DNS...
- Public DNS
- DNS resolution services offered for broad public use over the internet, such as Google's or Cloudflare's public recursive resolvers. Public DNS can improve...
- Recursive DNS
- The DNS resolution process or service in which a resolver queries other DNS servers on behalf of a client until it reaches an answer, rather than simply...
- Reverse DNS
- A DNS lookup that maps an IP address back to a hostname using PTR records instead of resolving a hostname to an IP. Reverse DNS is useful in logging,...
- SPF Record
- A DNS record that lists which mail servers are authorized to send email for a domain. It shows up in application security, identity, infrastructure, or...
- TTL
- Time to Live — a counter or timestamp that limits the lifespan of data. In DNS, TTL specifies how long a resolver should cache a record (in seconds). In IP...
Related Topics
- Network Security (7 terms in common)
- Networking (6 terms in common)
- Privacy (4 terms in common)
- Tls (3 terms in common)
- Encryption (3 terms in common)
- Email Security (3 terms in common)
- Infrastructure (3 terms in common)
- Command And Control (3 terms in common)
- Resolvers (2 terms in common)
- Malware (2 terms in common)
- Pki (2 terms in common)
- Evasion (1 terms in common)
- Operations (1 terms in common)
- Mail Infrastructure (1 terms in common)
- Identity (1 terms in common)
- Kubernetes (1 terms in common)
- Attribution (1 terms in common)
- Filtering (1 terms in common)
- Anti Spoofing (1 terms in common)
- Takeover (1 terms in common)