DNSSEC is an Internet standard that prevents spoofing attacks by allowing Web sites to verify their domain names and corresponding IP addresses using digital signatures and public-key encryption.
DNSSEC is being deployed across the Internet infrastructure, from the root servers at the top of the DNS heirarchy to the servers that run .com and .net and other top-level domains, and then down to the servers that cache content for individual Web sites.
DNSSEC has been in the news in recent weeks, with Comcast being the first U.S. carrier to announce a public trial of its DNSSEC signing and resolution services.
The link for this article located at Network World is no longer available.
