forked from kamranahmedse/developer-roadmap
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update dnssec.md (kamranahmedse#6251)
Update various topics with new links. --------- Co-authored-by: dsh <[email protected]>
- Loading branch information
1 parent
e46f24e
commit b4111ce
Showing
3 changed files
with
38 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,24 @@ | ||
# DNSSEC | ||
|
||
DNS Security Extensions (DNSSEC) is a protocol designed to address security vulnerabilities in the Domain Name System (DNS). Here are the key points: | ||
|
||
- **Digital Signatures:** | ||
DNSSEC protects against attacks by digitally signing DNS data. These signatures ensure data validity and prevent tampering. | ||
|
||
- **Hierarchical Signing:** | ||
DNSSEC signs data at every level of the DNS lookup process. For instance, when looking up ‘google.com,’ the root DNS server signs a key for the .COM nameserver, which then signs a key for google.com’s authoritative nameserver. | ||
|
||
- **Backwards Compatibility:** | ||
DNSSEC doesn’t disrupt traditional DNS lookups; it adds security without breaking existing functionality. It complements other security measures like SSL/TLS. | ||
|
||
- **Chain of Trust:** | ||
DNSSEC establishes a parent-child trust chain from the root zone down to specific domains. | ||
Any compromise in this chain exposes requests to on-path attacks. | ||
|
||
Learn more from the following resources: | ||
|
||
- [@article@DNSSEC: What Is It and Why Is It Important? - ICANN](https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en) | ||
- [@article@How DNSSEC Works - Cloudflare](https://www.cloudflare.com/dns/dnssec/how-dnssec-works/) | ||
- [@article@What is DNS security? - Cloudflare](https://www.cloudflare.com/learning/dns/dns-security/) | ||
- [@video@What is DNSSEC? - IBM](https://www.youtube.com/watch?v=Fk2oejzgSVQ) | ||
- [@video@(DNS) 101 Miniseries](https://www.youtube.com/playlist?list=PLTk5ZYSbd9MhMmOiPhfRJNW7bhxHo4q-K) |