DNS · Website glossary

DNSSEC

Quick answer · What is DNSSEC?

A set of DNS extensions that lets validating resolvers check the authenticity and integrity of signed DNS data.

IN PRACTICE

DNSSEC: an example

A resolver checks a chain of trust before accepting a signed zone's answer.

KEEP IN MIND

DNSSEC authenticates DNS data; it does not encrypt website traffic or replace HTTPS.

Put the idea to work

Frequently asked questions

What is a practical example of DNSSEC?

A resolver checks a chain of trust before accepting a signed zone's answer.

Does DNSSEC encrypt website traffic or replace HTTPS?

DNSSEC authenticates DNS data; it does not encrypt website traffic or replace HTTPS.

Which concepts should I read alongside DNSSEC?

DNS delegation: The assignment of authority for a child zone to nameservers, recorded in its parent zone.
TLS: Transport Layer Security is a protocol that provides encryption, integrity protection, and authentication for network connections.