DNSSEC

ˌdiː ɛn ɛs ˈsɛk · Abbreviation · Security & Infosec

Definitions

  1. Short for Domain Name System Security Extensions, a set of DNS protocol additions that let resolvers verify that DNS data was signed by the correct zone and not tampered with in transit. DNSSEC protects authenticity and integrity of DNS answers, not confidentiality of the query itself.

    In plain English: A DNS security system that helps prove a DNS answer is authentic and unchanged.

    Example: "Without DNSSEC validation, the resolver had no cryptographic way to detect the forged record."

Related Terms