advancedTechnical
DNSSEC (DNS Security Extensions)
Cryptographic extensions that verify DNS records haven't been tampered with — protection against spoofing.
By DomainGlossary EditorialLast updated Mar 27, 2026
DNSSEC is a set of DNS extensions that add cryptographic signatures to DNS records, allowing resolvers to verify that DNS responses are authentic and haven't been tampered with. It protects against DNS cache poisoning and man-in-the-middle attacks. DNSSEC requires configuration at the registrar level (adding DS records) and at the DNS zone level. Adoption is growing but not yet universal.