DNSSEC

Sitecheck Team

DNS Security Extensions provide a way to verify DNS data integrity and authenticity.

DNSSEC adds digital signatures to DNS records (RRSIG) and requires DNSKEY and DS records in the parent zone to build a chain of trust. It helps prevent cache poisoning and ensures clients can verify responses.

Note: DNSSEC does not encrypt DNS data; it only provides authenticity and integrity checks.