Networking · Flashcard
What does DNSSEC add to the DNS?
- ACryptographic signatures that let resolvers verify a record's authenticity
- BTransport encryption that hides every DNS query from network eavesdroppers
- CLoad balancing that spreads DNS queries across many redundant resolvers
- DAutomatic caching that stores popular records closer to the requesting client
Why this is the answer
DNSSEC signs records so a resolver can detect tampering and forged answers — it provides authenticity and integrity, not confidentiality. Encrypting the query itself is DoH/DoT (a common DNSSEC misconception), and it adds neither load balancing nor caching.
Official docs