DNSSEC

E37203

DNSSEC (Domain Name System Security Extensions) is a suite of specifications that adds cryptographic authentication and integrity protection to DNS data to prevent attacks such as cache poisoning and spoofing.

AI illustration

How this image was made

AI-generated illustration of DNSSEC

This AI-generated illustration was produced by black-forest-labs/FLUX.2-dev (1024x1024) from a prompt written by openai/gpt-oss-120b from the entity's label + description.

Prompt

Generate an image of DNSSEC (DNSSEC (Domain Name System Security Extensions) is a suite of specifications that adds cryptographic authentication and integrity protection to DNS data to prevent attacks such as cache poisoning and spoofing.)

All labels observed (15)

How this entity was disambiguated

Statements (51)

Predicate Object
instanceOf DNS extension ⓘ
internet security protocol suite ⓘ
abbreviation DNSSEC ⓘ
appliesTo forward DNS zones ⓘ
reverse DNS zones ⓘ
definedInRFC RFC 4033 ⓘ
RFC 4034 ⓘ
RFC 4035 ⓘ
RFC 4509 ⓘ
RFC 5011 ⓘ
RFC 5155 ⓘ
RFC 5702 ⓘ
RFC 6605 ⓘ
RFC 6840 ⓘ
RFC 8080 ⓘ
deploymentStatus partially deployed on the public internet ⓘ
doesNotProvide confidentiality ⓘ
fullName Domain Name System Security Extensions ⓘ
linked to: DNSSEC
introducesRecordType CDNSKEY ⓘ
CDS ⓘ
DNSKEY ⓘ
DS ⓘ
NSEC ⓘ
NSEC3 ⓘ
NSEC3PARAM ⓘ
RRSIG ⓘ
mitigates DNS cache poisoning ⓘ
DNS spoofing ⓘ
operatesOn DNS resource records ⓘ
provides data integrity ⓘ
data origin authentication ⓘ
relatedStandard DANE ⓘ
TSIG ⓘ
requires DNSSEC-aware authoritative name servers ⓘ
DNSSEC-validating resolvers ⓘ
rootZoneManagedBy ICANN ⓘ
U.S. Department of Commerce ⓘ
Verisign ⓘ
linked to: VeriSign
rootZoneSigned 2010-07-15 ⓘ
standardizedBy IETF ⓘ
supportsAlgorithm DSA ⓘ
ECDSA ⓘ
Ed25519 ⓘ
Ed448 ⓘ
RSA ⓘ
usesCryptography public key cryptography ⓘ
usesMechanism chain of trust ⓘ
delegation signer records ⓘ
key signing key ⓘ
zone signing key ⓘ
verificationPerformedBy validating resolver ⓘ

How these facts were elicited

Referenced by (74)

Full triples — surface form annotated when it differs from this entity's canonical label.

Domain Name System root zone → securedBy → DNS Security Extensions ⓘ
linked to: DNSSEC
DNSSEC → fullName → Domain Name System Security Extensions ⓘ
linked to: DNSSEC
DNSSEC → abbreviation → DNSSEC ⓘ
DNSSEC root key signing ceremony → relatedTo → Domain Name System Security Extensions ⓘ
linked to: DNSSEC
DNSSEC ZSK → usedIn → DNS Security Extensions ⓘ
linked to: DNSSEC
DNS64 → relatedTo → DNSSEC ⓘ
BCP 175 → appliesTo → DNSSEC ⓘ
BCP 175 → hasTopic → DNS Security Extensions ⓘ
linked to: DNSSEC
Cloud DNS → supports → DNSSEC ⓘ
RFC 4033 → title → DNS Security Introduction and Requirements ⓘ
linked to: DNSSEC
RFC 4033 → defines → DNS Security Extensions ⓘ
linked to: DNSSEC
RFC 4033 → defines → DNSSEC ⓘ
RFC 4033 → partOf → DNSSEC specification suite ⓘ
linked to: DNSSEC
RFC 4033 → definesConcept → DNSSEC trust model ⓘ
linked to: DNSSEC
RFC 4035 → partOf → DNS Security Introduction and Requirements specification set ⓘ
linked to: DNSSEC
RFC 4035 → relatedTo → DNS Security Extensions ⓘ
linked to: DNSSEC
RFC 4035 → partOf → DNSSEC standards suite ⓘ
linked to: DNSSEC
RFC 5702 → appliesToProtocol → DNS Security Extensions ⓘ
linked to: DNSSEC
RFC 5702 → appliesToProtocol → DNSSEC ⓘ
RFC 5155 → workingGroup → DNS Extensions (dnsext) ⓘ
linked to: DNSSEC
RFC 5155 → protocolFamily → DNS Security Extensions ⓘ
linked to: DNSSEC
RFC 5155 → protocolFamily → DNSSEC ⓘ
RFC 5011 → appliesTo → Domain Name System Security Extensions ⓘ
linked to: DNSSEC
RFC 5011 → relatedTo → DNSSEC ⓘ
RFC 5011 → hasKeyword → DNSSEC ⓘ
RFC 6605 → updatesSpecificationFor → DNS Security Extensions ⓘ
linked to: DNSSEC
RFC 6605 → relatesToProtocol → DNSSEC ⓘ
DNSSEC KSK → hasRoleIn → DNSSEC ⓘ
C-root → supportsFeature → DNSSEC ⓘ
G-root → implementsStandard → DNSSEC ⓘ
M-root → supportsProtocol → DNSSEC ⓘ
RFC 6840 → protocolFamily → Domain Name System Security Extensions ⓘ
linked to: DNSSEC
RFC 6840 → protocolFamily → DNSSEC ⓘ
RFC 6840 → clarifies → DNSSEC core specifications ⓘ
linked to: DNSSEC
CDS (Child DS) → partOf → DNSSEC ⓘ
subject linked to: CDS
DANE → uses → DNSSEC ⓘ
DANE → relatedStandard → DNSSEC ⓘ
TSIG → relatedTo → DNSSEC ⓘ
RFC 4034 → partOf → DNS Security Extensions specification ⓘ
linked to: DNSSEC
RFC 4034 → relatesTo → DNS Security Extensions ⓘ
linked to: DNSSEC
DNS over TLS → canBeUsedWith → DNSSEC ⓘ
RFC 6147 → relatedTo → DNSSEC ⓘ
FreeIPA → supportsStandard → DNSSEC (via BIND) ⓘ
linked to: DNSSEC
RFC 2535 → definesProtocol → DNS Security Extensions ⓘ
linked to: DNSSEC
RFC 2535 → shortName → DNSSEC ⓘ
RFC 3445 → relatedTo → DNSSEC ⓘ
RFC 3655 → relatedToStandard → DNSSEC ⓘ