What does DNSSEC provide?

What does DNSSEC provide?

• A. Enables faster queries
• B. Provides integrity and authenticity of DNS data via digital signatures
• C. Provides privacy
• D. Encrypts DNS data

Answer: (B)

DNSSEC provides integrity and authenticity of DNS data via digital signatures. It signs DNS zone data with a private key and publishes the corresponding public keys, allowing resolvers to verify responses. When a DNS response is received, the resolver checks the accompanying signatures (RRSIG) against the zone’s keys (DNSKEY) and follows the established chain of trust from the root down to the authoritative zone. If the signatures validate, you can trust that the data came from the legitimate source and hasn’t been altered in transit, helping to prevent spoofed responses and cache poisoning. It does not speed up queries, nor does it hide or encrypt DNS data; privacy and encryption require other mechanisms like DNS over TLS or DNS over HTTPS.

DNSSEC provides integrity and authenticity of DNS data via digital signatures. It signs DNS zone data with a private key and publishes the corresponding public keys, allowing resolvers to verify responses. When a DNS response is received, the resolver checks the accompanying signatures (RRSIG) against the zone’s keys (DNSKEY) and follows the established chain of trust from the root down to the authoritative zone. If the signatures validate, you can trust that the data came from the legitimate source and hasn’t been altered in transit, helping to prevent spoofed responses and cache poisoning. It does not speed up queries, nor does it hide or encrypt DNS data; privacy and encryption require other mechanisms like DNS over TLS or DNS over HTTPS.