What does DNSSEC add to the DNS?

Question

Accepted Answer

Cryptographic signatures that let resolvers verify a record's authenticity — DNSSEC signs records so a resolver can detect tampering and forged answers — it provides authenticity and integrity, not confidentiality. Encrypting the query itself is DoH/DoT (a common DNSSEC misconception), and it adds neither load balancing nor caching.

Answer

Transport encryption that hides every DNS query from network eavesdroppers

Answer

Load balancing that spreads DNS queries across many redundant resolvers

Answer

Automatic caching that stores popular records closer to the requesting client

What does DNSSEC add to the DNS?

Why this is the answer

More Networking Fundamentals flashcards