Group items tagged

DNSSEC was developed to add security to the Domain Name System . The tool works by adding information on the origin of authentication of DNS data, data integrity and authenticated denial of existence. DNSSEC obviously adds more information to queries and therefore increases the size of those query packets. Where older routers exist the additional information included in the larger data packets may not be recognised and therefore the DNS will not be resolved. The end user, in this instance, would not be able to visit the site they requested. The fear campaigns in the community have been around that very point: that the implementation of DNSSEC will not resolve host names. This article provides some light explanation around the rollout of DNSSEC and lays to rest the fear mongering by stating that there, to date, has been minimum negative effect of the DNSSEC that has been rolled out.

'Educause', a not for profit organisation supporting education in Information Technology, has released an excellent guide explaining DNS Security. It explains the primary benefit of incorporating DNSSEC, namely that it will '...expand the trustworthiness-and thus the usefulness-of the Internet as a whole.'.