DNSSEC

DNSSEC(域名系统安全扩展)为[[dns|DNS]]记录添加加密签名,使解析器可以验证响应未被篡改。DNSSEC可防止DNS查询中的缓存投毒和中间人攻击。

示例

With DNSSEC enabled, your browser can verify that the IP address returned for your-bank.com actually came from the authoritative DNS server.