An extension that lets DNS response tampering be detected using digital signatures.
DNS Security Extensions. A DNS security extension that uses digital signatures to let a resolver verify the integrity and origin authenticity of a response. Ordinary DNS has no way to detect a forged response with a spoofed source (DNS cache poisoning); DNSSEC was created to close that gap.
© 2026 ITBGM