017.009

DNSSEC & Security Enhancements

How to "authenticate" your address book. DNSSEC is a "digital signature" for your DNS records themselves. It proves that the "map" a server received (e.g., your MX record) is the real map, and wasn't "spoofed" or tampered with in transit.

10 questions in this topic

What is DNSSEC? How does DNSSEC protect email authentication? What’s the difference between DNSSEC and SSL/TLS? What is a DNS signature (RRSIG)? How does DNSSEC prevent spoofing or hijacking? Do all DNS providers support DNSSEC? What happens if DNSSEC is misconfigured? How can DNSSEC affect DKIM verification? Should small businesses enable DNSSEC? How can you test DNSSEC deployment?