
10/7/2014 · Nick Sullivan
What this post added
This post introduces DNSSEC as a set of security extensions to DNS that provides the means for authenticating DNS records. It explains the inherent insecurity of traditional DNS, highlighting on-path attacker attacks and Kaminsky's cache poisoning attack. It details how DNSSEC can be used to improve trust in DNS by providing authentication for DNS records, and announces Cloudflare's plan to introduce DNSSEC in the next six months.