_________ is a set of extensions to DNS that provide the origin authentication of DNS data to DNS clients (resolvers) so as to reduce the threat of DNS poisoning, spoofing, and similar types of attacks.
https://www.upguard.com/blog/dnssec
DNSSEC provides DNS resolvers origin authentication of DNS data, authenticated denial of existence and data integrity but not availability or confidentiality.
DNSSEC authenticates DNS using digital signatures based on public key cryptography. With DNSSEC, it's not DNS queries or response that are signed but rather the DNS data itself is signed by the owner of the data.
Before we dive into DNSSEC, it's important to understand what DNS is and why we need DNSSEC.
DNSSEC strengthens authentication in DNS using digital signatures based on public key cryptography. With DNSSEC, it's not DNS queries and responses themselves that are cryptographically signed, but rather DNS data itself is signed by the owner of the data.
DNSSEC adds two important features to the DNS protocol:
Data origin authentication allows a resolver to cryptographically verify that the data it received actually came from the zone where it believes the data originated.
Data integrity protection allows the resolver to know that the data hasn't been modified in transit since it was originally signed by the zone owner with the zone's private key.
Resource sited : https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
alotaibi
1 year, 1 month agoJoker20
1 year, 5 months agoIT_Nerdz
2 years, 1 month ago