DNSSEC

Question 1

What does DNSSEC stand for?

Answer 1

Domain Name System Security Extensions

Question 2

What is DNSSEC?

Answer 2

It is an industry-standard protocol that functions as an extension to the Domain Name System (DNS) protocol.
DNSSEC strengthens authentication inDNS using digital signatures based onpublic key cryptography. WithDNSSEC, it’s notDNSqueries and responses themselves that are cryptographically signed, but ratherDNSdata itself is signed by the owner of the data.

Question 3

What are the two DNSSEC keys that the F5 uses to return DNSSEC-compliant responses?

Answer 3

• Zone key signing
• Key signing

Question 4

What is a delegation of signing (DS)?

Answer 4

DNSSEC introduces a delegation signer (DS) record to allow the transfer of trust from a parent zone to a child zone. A zone operator hashes the DNSKEY record containing the public KSK and gives it to the parent zone to publish as a DS record.

Question 5

What is the chain of trust?

Answer 5

It is the idea that zones, top level (.com), and the root all have a trusted relationship.
.root trusts -> .com trusts -> zone google.com