{"id":1790,"date":"2021-09-30T16:51:26","date_gmt":"2021-09-30T14:51:26","guid":{"rendered":"https:\/\/dev.nameshield.com\/en\/?page_id=1790"},"modified":"2023-06-13T15:43:40","modified_gmt":"2023-06-13T13:43:40","slug":"dnssec","status":"publish","type":"page","link":"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/","title":{"rendered":"DNSSEC"},"content":{"rendered":"\n
<\/span>
\n
<\/div>\n\n\n
\n
\n

The Domain Name Sys\u00adtem Secu\u00adri\u00adty Exten\u00adsions<\/strong> (DNSSEC<\/em><\/strong>) is a stan\u00addard\u00adized pro\u00adto\u00adcol of com\u00admu\u00adni\u00adca\u00adtion allow\u00ading to resolve secu\u00adri\u00adty prob\u00adlems relat\u00aded to DNS. We will begin by a reminder of what is the DNS.<\/p>\n\n\n\n

How does the DNS work<\/strong>?<\/strong><\/h3>\n\n\n\n

The DNS<\/a> will allow web user to inform a domain name in his web brows\u00ader to access a web\u00adsite. The brows\u00ader will then \u201cresolve\u201d this domain name to obtain the IP address of the web serv\u00ader which hosts this web\u00adsite and dis\u00adplays it. We call this the \u201cDNS res\u00ado\u00adlu\u00adtion\u201d.<\/p>\n\n\n\n

DNSSEC <\/em>process<\/strong>:<\/strong><\/h3>\n\n\n\n

To secure the integri\u00adty of the DNS res\u00ado\u00adlu\u00adtion, DNSSEC<\/strong> <\/em>devel\u00adops a chain of trust that goes back to the DNS root. Data secu\u00adri\u00adty is done by keys mech\u00ada\u00adnism (KSK for Key Sign\u00ading Key & ZSK for Zone Sign\u00ading Key) which signs DNS records in its own zone. Pub\u00adlic keys are sent to the cor\u00adre\u00adspond\u00ading reg\u00adis\u00adter to be archived; the reg\u00adis\u00adter being linked by DNSSEC to the root serv\u00ader, the chain of trust is devel\u00adoped. Each DNS par\u00adent zone ensures the keys authen\u00adtic\u00adi\u00adty of its child zones by sign\u00ading them.<\/p>\n\n\n\n


<\/a><\/p>\n<\/div>\n\n\n\n

\n
\"DNSSEC<\/figure>\n\n\n\n

<\/p>\n<\/div>\n<\/div>\n\n\n

<\/div>\n\n\n\n

<\/p>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":861,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"wp_typography_post_enhancements_disabled":false,"editor_plus_copied_stylings":"{}","_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"neve_meta_sidebar":"full-width","neve_meta_container":"","neve_meta_enable_content_width":"on","neve_meta_content_width":100,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"class_list":["post-1790","page","type-page","status-publish","hentry"],"yoast_head":"\nDNSSEC - Secure the integrity of the DNS resolution - Nameshield<\/title>\n<meta name=\"description\" content=\"What is DNSSEC, what is its purpose and how does it work ? Find all the information regarding DNSSEC on Nameshield website.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DNSSEC - Secure the integrity of the DNS resolution - Nameshield\" \/>\n<meta property=\"og:description\" content=\"What is DNSSEC, what is its purpose and how does it work ? Find all the information regarding DNSSEC on Nameshield website.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/\" \/>\n<meta property=\"og:site_name\" content=\"Nameshield\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-13T13:43:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nameshield.com\/wp-content\/uploads\/2021\/05\/DNS-premium-Server-bro-Storyset-blue-1000x1024.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/glossary\\\/dnssec\\\/\",\"url\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/glossary\\\/dnssec\\\/\",\"name\":\"DNSSEC - Secure the integrity of the DNS resolution - Nameshield\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/glossary\\\/dnssec\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/glossary\\\/dnssec\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nameshield.com\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/DNS-premium-Server-bro-Storyset-blue-1000x1024.png\",\"datePublished\":\"2021-09-30T14:51:26+00:00\",\"dateModified\":\"2023-06-13T13:43:40+00:00\",\"description\":\"What is DNSSEC, what is its purpose and how does it work ? Find all the information regarding DNSSEC on Nameshield website.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/glossary\\\/dnssec\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.nameshield.com\\\/en\\\/glossary\\\/dnssec\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/glossary\\\/dnssec\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nameshield.com\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/DNS-premium-Server-bro-Storyset-blue-1000x1024.png\",\"contentUrl\":\"https:\\\/\\\/nameshield.com\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/DNS-premium-Server-bro-Storyset-blue-1000x1024.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/glossary\\\/dnssec\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Glossary\",\"item\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/glossary\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DNSSEC\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/\",\"name\":\"Nameshield\",\"description\":\"Online Assets Security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.nameshield.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DNSSEC - Secure the integrity of the DNS resolution - Nameshield","description":"What is DNSSEC, what is its purpose and how does it work ? Find all the information regarding DNSSEC on Nameshield website.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/","og_locale":"en_US","og_type":"article","og_title":"DNSSEC - Secure the integrity of the DNS resolution - Nameshield","og_description":"What is DNSSEC, what is its purpose and how does it work ? Find all the information regarding DNSSEC on Nameshield website.","og_url":"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/","og_site_name":"Nameshield","article_modified_time":"2023-06-13T13:43:40+00:00","og_image":[{"url":"https:\/\/nameshield.com\/wp-content\/uploads\/2021\/05\/DNS-premium-Server-bro-Storyset-blue-1000x1024.png","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/","url":"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/","name":"DNSSEC - Secure the integrity of the DNS resolution - Nameshield","isPartOf":{"@id":"https:\/\/www.nameshield.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/#primaryimage"},"image":{"@id":"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/#primaryimage"},"thumbnailUrl":"https:\/\/nameshield.com\/wp-content\/uploads\/2021\/05\/DNS-premium-Server-bro-Storyset-blue-1000x1024.png","datePublished":"2021-09-30T14:51:26+00:00","dateModified":"2023-06-13T13:43:40+00:00","description":"What is DNSSEC, what is its purpose and how does it work ? Find all the information regarding DNSSEC on Nameshield website.","breadcrumb":{"@id":"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/#primaryimage","url":"https:\/\/nameshield.com\/wp-content\/uploads\/2021\/05\/DNS-premium-Server-bro-Storyset-blue-1000x1024.png","contentUrl":"https:\/\/nameshield.com\/wp-content\/uploads\/2021\/05\/DNS-premium-Server-bro-Storyset-blue-1000x1024.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.nameshield.com\/en\/glossary\/dnssec\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Glossary","item":"https:\/\/www.nameshield.com\/en\/glossary\/"},{"@type":"ListItem","position":2,"name":"DNSSEC"}]},{"@type":"WebSite","@id":"https:\/\/www.nameshield.com\/en\/#website","url":"https:\/\/www.nameshield.com\/en\/","name":"Nameshield","description":"Online Assets Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.nameshield.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.nameshield.com\/en\/wp-json\/wp\/v2\/pages\/1790","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.nameshield.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.nameshield.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.nameshield.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.nameshield.com\/en\/wp-json\/wp\/v2\/comments?post=1790"}],"version-history":[{"count":7,"href":"https:\/\/www.nameshield.com\/en\/wp-json\/wp\/v2\/pages\/1790\/revisions"}],"predecessor-version":[{"id":2370,"href":"https:\/\/www.nameshield.com\/en\/wp-json\/wp\/v2\/pages\/1790\/revisions\/2370"}],"up":[{"embeddable":true,"href":"https:\/\/www.nameshield.com\/en\/wp-json\/wp\/v2\/pages\/861"}],"wp:attachment":[{"href":"https:\/\/www.nameshield.com\/en\/wp-json\/wp\/v2\/media?parent=1790"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}