Live briefing
Everything about Domain Name System Security Extensions
Suite of IETF specifications
The Domain Name System Security Extensions (DNSSEC) is a suite of extension specifications by the Internet Engineering Task Force (IETF) for securing data exchanged in the Domain Name System (DNS) in Internet Protocol (IP) networks. The protocol provides cryptographic authentication of data, authenticated denial of existence, and data integrity, but not availability or confidentiality. As of 2026, DNSSEC deployment is spotty. Wikipedia →
🧠Start here: a 6-step reading path
- Read the overview: Domain Name System Security ExtensionsA 5-minute orientation
- Pick up a classic book: Modern Operating SystemsThe most-reprinted book on the subject
- Read the landmark paper: A Credible Food Traceability System Based on Domain Name System Security ExtensionsCited 5 times
- Go sideways: DNS-based Authentication of Named EntitiesA closely related topic
- Go sideways: Domain Name SystemA closely related topic
đź“– Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
đź“š Books worth reading
Modern Operating SystemsAndrew S. Tanenbaum, Herbert Bos · 1992
Active DirectoryRobbie Allen, Joe Richards · 2003
Cartesian meditationsEdmund Husserl, Dorion Cairns · 1960
Unix System Administration HandbookEvi Nemeth, Garth Snyder · 1989
Data Communications and NetworkingBehrouz A. Forouzan, Catherine Ann Coombs · 2000
The Conspirators HierarchyJohn Coleman · 1992
Treaty Occupationay ToxicologySuelen Queiroz · 2010
BlockchainMelanie Swan · 2015
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
đź”— Related topics
- DNS-based Authentication of Named Entities DNS-based Authentication of Named Entities (DANE) is an Internet security protocol to allow X.509 digital certificates, commonly used for Transport Layer…
- Domain Name System The Domain Name System (DNS) is a hierarchical and distributed name service that provides a naming system for computers, services, and other resources…
- Comparison of DNS server software This article presents a comparison of the features, platform support, and packaging of many independent implementations of Domain Name System (DNS) name…
- TSIG TSIG (transaction signature) is a computer-networking protocol defined in RFC 2845. Primarily it enables the Domain Name System (DNS) to authenticate updates…
- DNS root zone In computing and the Internet, the DNS root zone is the top-level DNS zone in the hierarchical namespace of the Domain Name System (DNS). Before October…
- DNS spoofing DNS spoofing, also referred to as DNS cache poisoning, is a form of computer security hacking in which corrupt Domain Name System data is introduced into…
- List of DNS record types This is an overview of resource records (RRs) permissible in zone files of the Domain Name System (DNS). It also contains pseudo-RRs. Other types of records…
- DNSCurve DNSCurve is a proposed secure protocol for the Domain Name System (DNS), designed by Daniel J. Bernstein. It encrypts and authenticates DNS packets between…