What is DNSSEC?

DNSSEC stands for Domain Name System Security Extensions, a set of extensions to the DNS protocol designed to enhance the security of the Domain Name System (DNS). DNS is responsible for translating human-friendly domain names into IP addresses that computers understand.

The primary purpose of DNSSEC is to add an extra layer of security through digital signatures. These signatures verify the authenticity and integrity of DNS data, helping to prevent forgery and protect against attacks such as DNS poisoning.

How does DNSSEC work in simple terms?

1. Digital Signatures: DNSSEC adds digital signatures to DNS records. Each DNS zone, such as a domain name, is secured with a digital signature.
2. Data Authentication: When a computer makes a DNS request, it receives not only the IP address but also the digital signature. The computer uses this signature to verify that the DNS data is authentic.
3. Chain of Trust: DNSSEC establishes a chain of trust, starting from the root DNS servers down to the specific domain name. If a signature does not match, the computer can deem the data unreliable.

By implementing DNSSEC, the reliability and security of DNS are significantly enhanced, making it more difficult for malicious actors to manipulate DNS traffic. This strengthens the internet ecosystem against certain types of cyberattacks.

How do I secure my domains with DNSSEC?

As soon as you use our nameservers, DNSSEC is automatically enabled.