DNS Security Extensions (DNSSEC)

DNSSEC adds cryptographic signatures to DNS records, allowing clients to verify authenticity. Without DNSSEC, attackers can perform cache poisoning attacks. While DNSSEC does not encrypt DNS traffic, it ensures integrity. Deployment requires careful key management and coordination across DNS zones.