DNSSEC
Technology & Computing abbreviation · Networking
| Stands for | Domain Name System Security Extensions |
|---|---|
| Categories | Technology & Computing |
DNSSEC stands for Domain Name System Security Extensions, a networking abbreviation.
Adds cryptographic signatures to DNS records so resolvers can verify that answers really come from the domain's owner and were not forged or altered in transit. It protects against cache poisoning but does not encrypt queries.
Example: Enable DNSSEC at the registrar once our DNS host publishes the DS record.
Usage notes
The DNS root zone was signed in July 2010, two years after Dan Kaminsky's cache-poisoning disclosure showed how vulnerable DNS was. Trust flows down a chain from the root through each top-level domain to the signed zone. Adoption is uneven because a misconfiguration can make a domain unreachable for validating resolvers.
Related abbreviations
More networking abbreviations
- CRC – Cyclic redundancy check
- CSMA/CD – Carrier-sense multiple access with collision detection
- DDNS – Dynamic DNS
- DHCP – Dynamic Host Configuration Protocol
- DMZ – Demilitarized zone
- DNS – Domain Name System
- DoH – DNS over HTTPS
- DoT – DNS over TLS
- EIGRP – Enhanced Interior Gateway Routing Protocol
- FQDN – Fully qualified domain name
- FTP – File Transfer Protocol
- FTPS – FTP Secure