Extra Credit

DNSSEC (RFC 4033-4035)

Standards and protocols Web and networking protocols
Official docs Learn DNSSEC (RFC 4033-4035) on your Mac

Official docs outline

8 sections
  1. DNSSEC terminology and definitions

    Goals of DNSSEC: data origin authentication and integrity.

  2. DNSKEY resource record

    Public keys used to verify signatures and key flags (ZSK, KSK).

  3. RRSIG resource record

    Signatures over RRsets, inception and expiration.

  4. NSEC resource record

    Authenticated denial of existence.

  5. DS resource record

    Delegation signer record forming the chain of trust.

  6. Zone signing

    Signing zones and handling unsigned delegations.

  7. Resolver validation

    Validating responses and building the chain of trust.

  8. NSEC3 hashed denial of existence

    Hashed owner names to prevent zone walking.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

All 36