DNSSEC

E37203

DNSSEC (Domain Name System Security Extensions) is a suite of specifications that adds cryptographic authentication and integrity protection to DNS data to prevent attacks such as cache poisoning and spoofing.

All labels observed (11)

How this entity was disambiguated

Statements (51)

Predicate Object
instanceOf DNS extension
internet security protocol suite
abbreviation DNSSEC
appliesTo forward DNS zones
reverse DNS zones
definedInRFC RFC 4033
RFC 4034
RFC 4035
RFC 4509
RFC 5011
RFC 5155
RFC 5702
RFC 6605
RFC 6840
RFC 8080
deploymentStatus partially deployed on the public internet
doesNotProvide confidentiality
fullName Domain Name System Security Extensions
linked to: DNSSEC
introducesRecordType CDNSKEY
CDS
DNSKEY
DS
NSEC
NSEC3
NSEC3PARAM
RRSIG
mitigates DNS cache poisoning
DNS spoofing
operatesOn DNS resource records
provides data integrity
data origin authentication
relatedStandard DANE
TSIG
requires DNSSEC-aware authoritative name servers
DNSSEC-validating resolvers
rootZoneManagedBy ICANN
U.S. Department of Commerce
Verisign
linked to: VeriSign
rootZoneSigned 2010-07-15
standardizedBy IETF
supportsAlgorithm DSA
ECDSA
Ed25519
Ed448
RSA
usesCryptography public key cryptography
usesMechanism chain of trust
delegation signer records
key signing key
zone signing key
verificationPerformedBy validating resolver

How these facts were elicited

Referenced by (44)

Full triples — surface form annotated when it differs from this entity's canonical label.

Domain Name System root zone securedBy DNS Security Extensions
linked to: DNSSEC
DNSSEC fullName Domain Name System Security Extensions
linked to: DNSSEC
DNSSEC abbreviation DNSSEC
DNSSEC root key signing ceremony relatedTo Domain Name System Security Extensions
linked to: DNSSEC
DNSSEC ZSK usedIn DNS Security Extensions
linked to: DNSSEC
DNS64 relatedTo DNSSEC
BCP 175 appliesTo DNSSEC
BCP 175 hasTopic DNS Security Extensions
linked to: DNSSEC
Cloud DNS supports DNSSEC
RFC 4033 title DNS Security Introduction and Requirements
linked to: DNSSEC
RFC 4033 defines DNS Security Extensions
linked to: DNSSEC
RFC 4033 defines DNSSEC
RFC 4033 partOf DNSSEC specification suite
linked to: DNSSEC
RFC 4033 definesConcept DNSSEC trust model
linked to: DNSSEC
RFC 4035 partOf DNS Security Introduction and Requirements specification set
linked to: DNSSEC
RFC 4035 relatedTo DNS Security Extensions
linked to: DNSSEC
RFC 4035 partOf DNSSEC standards suite
linked to: DNSSEC
RFC 5702 appliesToProtocol DNS Security Extensions
linked to: DNSSEC
RFC 5702 appliesToProtocol DNSSEC
RFC 5155 workingGroup DNS Extensions (dnsext)
linked to: DNSSEC
RFC 5155 protocolFamily DNS Security Extensions
linked to: DNSSEC
RFC 5155 protocolFamily DNSSEC
RFC 5011 appliesTo Domain Name System Security Extensions
linked to: DNSSEC
RFC 5011 relatedTo DNSSEC
RFC 5011 hasKeyword DNSSEC
RFC 6605 updatesSpecificationFor DNS Security Extensions
linked to: DNSSEC
RFC 6605 relatesToProtocol DNSSEC
DNSSEC KSK hasRoleIn DNSSEC
C-root supportsFeature DNSSEC
G-root implementsStandard DNSSEC
M-root supportsProtocol DNSSEC
RFC 6840 protocolFamily Domain Name System Security Extensions
linked to: DNSSEC
RFC 6840 protocolFamily DNSSEC
RFC 6840 clarifies DNSSEC core specifications
linked to: DNSSEC
CDS (Child DS) partOf DNSSEC
subject linked to: CDS
DANE uses DNSSEC
DANE relatedStandard DNSSEC
TSIG relatedTo DNSSEC
RFC 4034 partOf DNS Security Extensions specification
linked to: DNSSEC
RFC 4034 relatesTo DNS Security Extensions
linked to: DNSSEC
DNS over TLS canBeUsedWith DNSSEC