Domain Name System Security Extensions
Domain name system security extensions dnssec allow registrants to digitally sign information they put into the domain name system dns.
Domain name system security extensions. The proper functioning of the internet is critically dependent on the dns. The domain name system security extensions dnssec is a suite of specifications outlining details for securing certain information being provided by the domain name system dns as it is being used on networks using the internet protocol ip. Attackers could compromise your. This protects consumers by ensuring dns data that has been corrupted either accidentally or maliciously doesn t reach them.
Essentially dnssec adds. Extensions to the dns are described that provide these services to security aware resolvers or applications through the use of cryptographic digital signatures. The domain name system security extensions dnssec is a suite of internet engineering task force ietf specifications for securing certain kinds of information provided by the domain name system dns as used on internet protocol ip networks. Rfc 2535 dns security extensions march 1999 1 overview of contents this document standardizes extensions of the domain name system dns protocol to support dns security and public key distribution.
Dnssec menyediakan ekstensi kepada dns yang disediakan untuk klien dns resolver dalam otentikasi data dns pengelabuan eksistensi terotentikasi dan integritas data. The purpose of dnssec is to increase the security of the internet as a whole by addressing dns security weaknesses. The dns sec is a set of extensions of dns that provide dns. Domain name system security extensions dnssec merupakan sekumpulan spesifikasi internet engineering task force ietf untuk mengamankan informasi sistem penamaan domain dns seperti yang digunakan pada protokol internet ip.
When the dns was designed security was not a focus. It assumes that the reader is familiar with the domain name system particularly as described in rfcs 1033 1034 1035 and later rfcs. Dnssec provides a means to secure dns data by using digital signatures and public key. Domain name system security extensions.
To understand domain name system security extensions dnssec it helps to have a basic understanding of the domain name system dns. Every web page visited every email sent. Domain name system security extensions dnssec the original dns protocol did not support security making dns vulnerable to attacks such as packet interception spoofing and cache poisoning potentially compromising all future communications to a host.