DNSSEC (short for DNS Security Extensions) adds security to the Domain Name System.
DNSSEC was designed to protect the Internet from certain attacks, such as DNS cache poisoning.
It is a set of extensions to DNS, which provide:
- origin authentication of DNS data
- data integrity
- authenticated denial of existence
DNSSEC does not provide availability or confidentiality.