DNS Security Extensions (DNSSEC) was first introduced in the mid-1990s as an additional security measure to protect the DNS from cache poisoning exploits (recently referred to as the Kaminsky bug) which can allow a bad actor to get in the middle of an Internet users’ request to access a Web site without their knowledge. DNSSEC introduces digital signatures to the DNS infrastructure and can provide users with effective verification that their applications, such as Web or email, are using the correct addresses for servers they want to reach.
- DNSSEC overview |
![[file]](http://www.info/sites/all/modules/webfm/image/icon/pdf.gif "Download DNSSEC Overview")
DNSSEC Overview | | .pdf | 03/02/09 | 73.54 KBThis document provides a short overview on what DNSSEC is and how it works.
- Securing a domain: SSL vs. DNSSEC | Securing a Domain SSL vs DNSSEC | | .pdf | 03/02/09 | 87.58 KBHoward Eland Senior Director Of Content Propagation and Resolution at Afilias discusses the differences between SSL and DNSSEC.
- DNSSEC presentation ICANN Mexico City | Ram Mohan presentation on DNSSEC - ICANN Mexico City | | .pdf | 03/02/09 | 557.09 KBFebruary 28 2009 - At-Large Summit ICANN Mexico City
- DNSSEC RFC Standards | DNSSEC RFCs | | .pdf | 03/02/09 | 64.18 KBThe RFC standards that specify the core functionality of DNSSEC.
- CircleID: You Don't Need to Hack Twitter.com to Control All Its Traffic and Email
Ram Mohan discuses in a CircleID.com blog post how hackers can gain control of a Web site and the implications for DNSSEC.