Skip to content
Gridlode
Glossary

What is DNSSEC?

Cryptographic signatures that let resolvers verify DNS answers weren't tampered with.

With DNSSEC the zone is signed and the registry publishes a DS record linking to the domain's key. RDAP shows whether a domain's delegation is signed.

Related terms

  • TTL (time to live): How long, in seconds, resolvers may cache a DNS answer.
  • SPF: Sender Policy Framework: a TXT record listing which servers may send email for a domain.
  • DKIM: DomainKeys Identified Mail: cryptographic signatures on outgoing email.