26
What is DNSSEC ?Domain Name System Security Extensions
Attach the security the domain name system (briefly DNSSEC) is a set of characteristic strike force Internet Engineering (briefly IETF) for securing some types of information prepared by the domain name system, etc., with that in Internet Protocol (abbreviated IP) network are used.
computer at the beginning of the relationship with the internet, the Internet Protocol address of a service provider, the domain name system (DNS resolver) (which is usually earlier, by company, supplier of internet services they are set up) as the server the domain name system of your determine. From this time onwards, the computer, any internet address that the intention of referring to it is the first service provider, the domain name system of your data with the help of it, address Internet Protocol address it internet come. The service provider system a domain name reply back after performing a number of questions in a chain (recursion) from other service providers, the domain name system, computer, user, returns. Is simple, these questions and answers lead to the translation of the name of an internet address to Internet Protocol address gets it.
In order to avoid receiving the wrong information by the system, the domain name in time, get answers questions the chain (in order to find the Internet Protocol address can be done) that by the United States and the attacker's (Hacker) created and on the internet. protocol under the title of the Annex Security the domain name system was created. The result of the existence of such information, the wrong get the Internet Protocol address wrong and back it up to the computer user that makes the connection of computers to the service provider address other than the address requested, the user can be. For example, the applicant is the website of a bank, instead of viewing the website its main, a website is fake and obviously, this can be achieved for any possible abuse open world.
the use of the protocol, the Annex Security the domain name system instead of the old way and the usual use of the domain name system can be the answer suitable for such problems has been and thereby prevent the received information from sources wrong on the internet and fuzzies prevents the occurrence of abuse possible .
This protocol properly a content in the time doing questions and answers, the chain does not guarantee, but can only properly the identity of the publisher of that content, to examine. Thus, each service provider, the domain name system can be sure someone answers a question, gives the same that should be not a service provider, wrong. In other words, if the effect of human mistake, and even information wrong about the name of a web site on the internet. this protocol is able to detect this wrong, but can only be the identity of the publisher of the content it confirm whether this is the same publisher that should be waiting to hear a reply from it was or not....