This article provides you with information regarding DNSSEC which is being implemented by Domain Registrars across the globe.



A brief description of how DNS works


To understand Domain Name System Security Extensions (DNSSEC), it helps to have a basic understanding of the Domain Name System (DNS).


Functionality of the Internet is critically dependent on the DNS . Every web page visited, every email sent, every picture looked at on  a social media: all those interactions use  DNS to translate human-friendly domain names (such as 1-grid.com) to the IP addresses (such as 104.20.143.107) needed by servers, routers, and other network devices to transport traffic across the Internet to the correct destination.



The DNS Security Extensions (DNSSEC)


DNSSEC strengthens authentication in DNS by adding two important features to the DNS protocol:


  • Data origin authentication allows a resolver to cryptographically verify that the data it received actually came from the zone where it believes the data originated.


  • Data integrity protection allows the resolver to know that the data hasn't been modified in transit since it was originally signed by the zone owner with the zone's private key.






TIP: For more in depth information on how DNSSEC works we would suggest the article here.