Definition
DNSSEC, or Domain Name System Security Extensions, is a suite of DNS extensions that secures certain kinds of information provided by the DNS. It adds security to the DNS lookup process by digitally signing DNS records, ensuring data integrity and authenticity. When a DNS query is made, DNSSEC allows the client to verify that the response came from the legitimate authoritative name server and has not been tampered with. This is crucial for preventing DNS spoofing and cache poisoning attacks, which can redirect users to malicious websites. For example, DNSSEC helps ensure that when you type a website address, you are actually connecting to the intended site, not a fake one set up by attackers. It is important to note that DNSSEC does not encrypt DNS traffic itself, it only authenticates the data. You will encounter DNSSEC on exams like CompTIA Security+ and CISSP, as well as in advanced network security courses.