DNSSEC: The Global Chain of Trust

Often described as the Internet phonebook, DNS is fundamentally important to the Internet. DNS also inherits various design, implementation and configuration vulnerabilities. One of those is the threat of DNS cache poisoning, which needs another security protocol, known as DNS Security Extensions (DNSSEC), to fix it.



Nexusguard DNS Protection now supports DNSSEC to eliminate DNS spoofing and man-in-the-middle (MITM) interceptions for preventing DNS cache poisoning. This paper briefly explains what DNSSEC is, how it works, what its benefits are, how Nexusguard deploys DNSSEC and key management best practices.